
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@octopusdeploy/step-package-cli
Advanced tools
``` npm i --save-dev @octopusdeploy/step-package-cli ```
npm i --save-dev @octopusdeploy/step-package-cli
The Step Package CLI provides a set of tools to build, pack and publish step packages in a consistent manner, so that once built they are in a format that is guaranteed to work with Octopus Server.
The build command:
package.json
file located via the packageDirectory
parametermetadata.json
file located via the sourceDirectory
parameter and looking for contents relative to itnode
components (executor.js, validator.js) within the step package in CommonJS
formatbrowser
components (ui.js) within the step package in ESM
formatinputs.ts
zip
file located in the outputDirectory
The publish command:
packagePath
parameter. A glob pattern can be used to process multiple packages.feedUrl
parameter, using the apiKey
parameter for authentication to the feed.ignoreExistingPackageErrors
flag.Why CommonJS
for node and ESM
for the browser? Because ESM in node is currently painful.
Step Packages are expected to follow these conventions:
metadata.json
file that adheres to either the Step Metadata Schema or the Target Metadata Schemaexecutor.ts
validator.ts
ui.ts
input.ts
logo.svg
metadata.json
in a single directory.Multiple steps and deployment targets may exist in a Step Package, but they must exist in separate directories within it. See the Step Package Template Repository for a sample repository structure.
Code within the step package can be broken down into an arbitrary number of ts
files, but the expected root files listed above must exist at the step root directory, and they must contain the expected default exports.
If these conventions are not followed, the CLI build will fail.
If a step package needs to supply additional configuration to esbuild (for example, to specify some external packages to ignore), it can provide a step-package.json
, and declare a subset of the options available on esbuild.BuildOptions
. This configuration will be contributed to the build of all of the components within the step package.
FAQs
``` npm i --save-dev @octopusdeploy/step-package-cli ```
The npm package @octopusdeploy/step-package-cli receives a total of 145 weekly downloads. As such, @octopusdeploy/step-package-cli popularity was classified as not popular.
We found that @octopusdeploy/step-package-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.