
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@labshare/semantic-release-config
Advanced tools
Shared semantic-release configuration for LabShare Github projects
Shared configuration for Semantic Release. Details: shared-config.
Labshare repositories can use the following configurations:
Defined in index.js
file, loaded by default when requiring @labshare/semantic-release-config
. Used by both client-side and server-side projects, contains the standard release procedure for semantic-release.
devDependency
: npm i @labshare/semantic-release-config --save-dev
{
"extends": "@labshare/semantic-release-config"
}
Defined in angular-lib.js
file, specific for Angular Libraries. Loaded by default when requiring @labshare/semantic-release-config/angular-lib
and adapted for the following requirements:
build
step (npm run build:lib
), NgPackagr will create a new folder for the bundled package (/dist
, by default). This happens because:
In order for NgPackagr and Semantic-Release integrate correctly, some adjustments have been made necessary:
/dist
package.json
and package-lock.json
versions to reflect updates on Git repository after a release. However, since the default folder is now /dist
, this specific configuration has to update root package.json
and package-lock.json
files with customized scripts.In your Angular Library repository:
Install ngPackagr as devDependency
and configure it
Make sure you have build:lib
script configured to call ng-packagr
in the repo to be built,
as well as semantic-release
script.
Install this module as devDependency
: npm i @labshare/semantic-release-config --save-dev
Add to your semantic-release config file:
{
"extends": "@labshare/semantic-release-config/angular-lib"
}
jobs:
include:
- stage: release
if: branch = master
node_js: lts/*
script:
- npm run build:lib
deploy:
provider: script
skip_cleanup: true
script:
- npm run semantic-release
NPM_TOKEN
owner should have publish permission on NPM groups.GH_TOKEN
owner should have push permission for the Git Repository.FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.