Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@icapps/tree-house-boilerplate
Advanced tools
NodeJS boilerplate module written in typescript
git clone git@github.com:icapps/tree-house-boilerplate.git
Copy code to new git project, commit and start making your new module
The project is written in Typescript. More information can be found here.
TSLint is an extensible static analysis tool that checks TypeScript code for readability, maintainability, and functionality errors. It is widely supported across modern editors & build systems and can be customized with your own lint rules, configurations, and formatters. More information can be found here.
Node Package Manager has been integrated to publish the package afterwards. Npm is the package manager for JavaScript and the world's largest software registry. This way these modules can be used within the actual NodeJS project using npm install
.
Releasing a new version of the module has been made easy using np.
npm run release
Travis CI is a hosted, distributed continuous integration service used to build and test software projects hosted at GitHub. There is a .travis.yml
file included in the boilerplate. You still need to enable the module in Travis CI. This will allow you to run your tests and other checks for commits, pull requests and or merges automatically.
Ensure that all your new code is fully covered, and see coverage trends emerge. Works with any CI service. This way you can track the coverage progress for each commit and/or branch in a visual overview. You still need to enable the module in Coveralls.io. It will automatically be trigged as the last step in Travis CI described in the .travis.yml
file.
All tests are written using Jest. Check out the documentation here for more information.
You can run npm run test
to run all tests
You can run npm run test:coverage
to run all tests with coverage report
When you find issues, please report them:
Be sure to include all of the output from the npm command that didn't work as expected. The npm-debug.log file is also helpful to provide.
See the list of contributors who participated in this project.
This project is licensed under the ISC License - see the LICENSE.md file for details
FAQs
Tree House Boilerplate
The npm package @icapps/tree-house-boilerplate receives a total of 1 weekly downloads. As such, @icapps/tree-house-boilerplate popularity was classified as not popular.
We found that @icapps/tree-house-boilerplate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.