
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@manuscripts/article-editor
Advanced tools
This repository contains the editor package of Manuscripts app to be used in a react application.
Manuscripts is highly modular: it is composed out of a series of NPM published modules following a few different themes.
@manuscripts/manuscript-editor, plus modules for converting to and from the Manuscripts data model and exporting to HTML or JATS XML.@manuscripts/manuscript-transform.sachs and other open source document transformation tools and libraries into a REST web service. Source at gitlab.com/mpapp-public/pressroom, documentation at pressroom.manuscripts.io/v1/docs?html.Run yarn install @manuscripts/article-editor in your application.
The variables listed in .env.example must all be defined as environment variables in your project.
Run yarn build to build the app to the dist folder.
Deploy the files to S3 with scripts/deploy.sh.
cp .env.example .env. The variables listed in .env.example have appropriate default values for running in a mode where the backend API server is running locally (this is optional, and you can complete local development tasks in the absence of the backend services). See steps below under "Running the backend API in Docker" for steps to launch the API server locally.docker volume create --name=yarn-cache to create a yarn cache for the backend services that you will launch in the next step. This step is only needed once.docker-compose up jupyter to start the services needed for development.yarn start to start the app in development mode (using webpack-dev-server).http://localhost:8080/developer to create a dummy user profile. Now you're good to go.docker/server/.env.docker login registry.gitlab.com to log in to GitLab’s Container Registry using your GitLab username and password (or a deploy token for read-only access to the registry images).docker-compose pull to pull the latest server Docker images.scripts/api/initialize.sh. If running on Windows or MacOS, it may be necessary to increase the RAM allocated to Docker. (This can be done through Docker Desktop > Preferences > Resources > Advanced > Memory.)docker-compose up apidocker-compose up jupyter to start the additional services.yarn start to start the frontend.http://localhost:8080/signup to create a user account. Confirmation emails generally won't be sent from a locally-running API, but you can ignore that message (see APP_SKIP_ACCOUNT_VERIFICATION in docker/server/defaults.env)docker-compose down. Add an optional -v flag to delete the data volumes.kubectl is using the appropriate context:
kubectl config current-context to show the current context.kubectl config get-contexts to list the available contexts.kubectl config set-context docker-desktop to set the context.docker-compose build clientdocker stack deploy --compose-file <(docker-compose config) manuscriptsdocker stack rm manuscriptsRun yarn test to run the unit tests in Jest.
yarn run cypress:open to launch the Cypress runner.Run all specsSee the manuscripts-frontend wiki for more information.
scripts/api/initialize.shdocker-compose up sync-gateway jupyterscripts/api/start-local.sh@manuscripts/style-guide to a folder alongside this one, run yarn install to install its dependencies, run yarn link to make it available as a local dependency, then run yarn dev in that folder to start building it.yarn link @manuscripts/style-guide to use the linked module as a local dependency.Run yarn stats to generate a stats.json file, then yarn analyze to open webpack-bundle-analyzer's visualization of the webpack bundle.
FAQs
React components for editing and viewing manuscripts
The npm package @manuscripts/article-editor receives a total of 352 weekly downloads. As such, @manuscripts/article-editor popularity was classified as not popular.
We found that @manuscripts/article-editor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.