
Security News
Google’s OSV Fix Just Added 500+ New Advisories — All Thanks to One Small Policy Change
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
@pismo/almighty
Advanced tools
Tool used to standardize some common tasks in frontend projects
Tool used to standardize some common tasks in frontend projects
npm install --save-dev @pismo/almighty
almighty release version (patch, minor, major) [--no-push]
Basically a version bump based on [semver] (http://semver.org/). This task bump the desired version, change the CHANGELOG.md of the project to show the changes, commit and tag the version.
If you only want to make the version bump without pushing anything, just use the flag --no-push
almighty release version (patch, minor, major) --no-push
This task use some environment variables to make the communication with GitHub service:
almighty deploy [-p dist]
By default, it deploys the contents of the dist
folder to a bucket on S3. If the bucket does not exist, the bucket is created and configured to serve as a website.
You can define the path where almight will get the final distribution folder, with the -p
(alias for --path) parameter.
The bucket is created based on the project name and the current branch. So if the project is foo
and the branch is bar
the bucket name will be foo-bar
.
This task use some environment variables to make the communication with AWS service:
All assets that go up to the bucket already go up with configured cache system
almighty rollbar
Notify the rollbar about the new deploy.
This task use some environment variables to make the communication with rollbar service:
FAQs
Tool used to standardize some common tasks in frontend projects
We found that @pismo/almighty demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
Research
/Security News
175 malicious npm packages (26k+ downloads) used unpkg CDN to host redirect scripts for a credential-phishing campaign targeting 135+ organizations worldwide.
Security News
Python 3.14 adds template strings, deferred annotations, and subinterpreters, plus free-threaded mode, an experimental JIT, and Sigstore verification.