Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
@khulnasoft-opensource/opengraph.khulnasoft.com
Advanced tools
OpenGraph dot KhulnaSoft OpenSource is a general purpose social card generator
The path to your next Open Source contribution
[]labelColor=6A7EC2)](https://discord.gg/U2peSNf23P)
In order to run the project we need the following software binaries installed on our development machines:
node>=18.15.0
npm>=9.6.3
docker>=20.10.23
To install the application:
npm ci
To start a local copy of the app on port 3001
:
npm run start:dev
There are a few scripts that can be used to generate and test the social cards locally without having to deploy to the CDN. This is the way to go when developing & testing the interface for the social cards.
npm run test:local:user
Generates user cards for all users in the test array inside
test/local-dev/UserCards.ts
and outputs them indist/local-dev/
for testing.
The same goes for the other card types:
npm run test:local:insight
is for generating insight cards.npm run test:local:highlight
is for generating highlight cards.The output of these scripts can be found in the dist/local-dev/
folder as well.
Some environment variables are required to run the application. You can find them in the .env.example
file. While most of them are optional, some are required to run the application.
One can reverse engineer the named configs but some need a little explanation.
Boilerplate, changed mostly locally:
# GitHub private access tokens
GITHUB_PAT_USER=ghp_************************************
# DigitalOcean Spaces through aws-sdk configuration
DO_SPACES_ACCESS_KEY_ID=********************
DO_SPACES_SECRET_ACCESS_KEY=*******************************************
Ping @khulnasoft-opensource/maintainers to get the dev CDN keys for the DO_SPACES_*
variables.
Other Digital Ocean S3 variables are sensibly set to default for local development, here are the defauls:
DO_SPACES_ENDPOINT=digitaloceanspaces.com
DO_SPACES_REGION=sfo3
DO_SPACES_BUCKET_NAME=opengraph-dev
It is also advised to set the following variables to true
to avoid using the cached CDN during development:
DO_SPACES_CDN_DISABLED=true
If using a custom domain, you can set the following variable to the domain name:
DO_SPACES_SUBDOMAIN=beta.opengraph-cdn.okhulnasoft.com
Other API defaults you can change are not required in local development, but can sometimes appear configured differently for production:
API_HOST=0.0.0.0
API_PORT=3005
API_DOMAIN=opengraph.okhulnasoft.com
MEMORY_HEAP=200
MEMORY_RSS=3000
DISK_PERCENTAGE=0.7
DISK_SIZE=100
To check the code and styles quality, use the following command:
npm run lint
This will also display during development, but not break on errors.
To fix the linting errors, use the following command:
npm run format
It is advised to run this command before committing or opening a pull request.
We have a couple of scripts to check and adjust missing types.
In order to dry run what types would be added to package.json
:
npm run types:auto-check
In order to add any missing types to package.json
:
npm run types:auto-add
A production deployment is a complete build of the project, including the build of the static assets.
npm run build
We encourage you to contribute to KhulnaSoft OpenSource! Please check out the Contributing guide for guidelines about how to proceed.
Got Questions? Join the conversation in our Discord.
Find KhulnaSoft OpenSource videos and release overviews on our YouTube Channel.
Below is visual representation of our code repository. It is generated by Octo Repo Visualizer.
This visualization is being updated on release to our default branch by our release workflow.
MIT © KhulnaSoft OpenSource
FAQs
OpenGraph dot KhulnaSoft OpenSource is a general purpose social card generator
We found that @khulnasoft-opensource/opengraph.khulnasoft.com demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.