Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@gosls/tencent-bottle
Advanced tools
* 该组件的功能:支持Serverless Framework的指定组件部署 * 该组件对应的官方依赖地址:https://github.com/serverless-components/tencent-bottle
Serverless Components有很多有趣的组件,在使用的时候也非常方便,但是有的时候我们yaml中有很多很多组件,我们只修改了一其中一个,执行的时候会全部都执行一次,这会浪费很多时间和经历,所以作为社区爱好者我推出了gosls系列。
这一套组件的使用方法很简单,用户只需要把Serverless原有的组件名修改就好,例如tencent-scf组件,原有的格式是:
# serverless.yml
helloWorld:
component: "@serverless/tencent-scf"
inputs:
name: myFunction1
codeUri: ./code # 代码目录
... ...
此时只需要改成:
# serverless.yml
helloWorld:
component: "@serverless/tencent-scf"
inputs:
name: myFunction1
codeUri: ./code # 代码目录
... ...
是的,只需要修改component中的@serverless,变成@gosls,在使用的时候,如果想单独操作某个部分,可以直接使用参数-n
,例如我有多个组件:
# serverless.yml
helloWorldTest1:
component: "@serverless/tencent-scf"
inputs:
name: myFunction1
codeUri: ./code # 代码目录
... ...
helloWorldTest2:
component: "@serverless/tencent-scf"
inputs:
name: myFunction1
codeUri: ./code # 代码目录
... ...
helloWorldTest3:
component: "@serverless/tencent-scf"
inputs:
name: myFunction1
codeUri: ./code # 代码目录
... ...
我想对其中helloWorldTest1
进行部署,只需要执行sls --debug -n helloWorldTest1
,如果是remove,就是sls remove --debug -n helloWorldTest1
如果不指定-n
参数,系统会默认全部部署/移除。
整个项目流程非常简单,只是在官方基础上增加一层判断,所有的yaml规范和组件更新,都是直接使用官方的,请放心使用。
FAQs
* 该组件的功能:支持Serverless Framework的指定组件部署 * 该组件对应的官方依赖地址:https://github.com/serverless-components/tencent-bottle
The npm package @gosls/tencent-bottle receives a total of 6 weekly downloads. As such, @gosls/tencent-bottle popularity was classified as not popular.
We found that @gosls/tencent-bottle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.