Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@retailmenot/anchor
Advanced tools
A React design system library.
There are several ways to install Git on a Mac. The easiest is probably to install the Xcode Command Line Tools. On Mavericks (10.9) or above you can do this simply by trying to run git from the Terminal the very first time.
$ git --version
If you don’t have it installed already, it will prompt you to install it.
If you want a more up to date version, you can also install it via a binary installer. A macOS Git installer is maintained and available for download at the Git website, at http://git-scm.com/download/mac.
You can download and install Node easily fom their website, but it's recommended that you install it using Node Version Manager
$ curl -o- https://raw.githubusercontent.com/creationix/nvm/v0.33.11/install.sh | bash
Then install Node
$ nvm install node
First you will need Homebrew
$ /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
Then install Yarn via Homebrew:
$ brew install yarn --without-node
Clone the repo:
$ git clone git@github.com:RetailMeNot/anchor.git
$ yarn
or
$ npm i
$ yarn dev
or
$ npm run dev
This will run the app in development mode.
$ yarn test
or
$ npm run test
This will run the entire Jest test suite in development (watch) mode.
See our contributing guide.
brew install watchman
https://github.com/facebook/jest/issues/1767#issuecomment-248883102
FAQs
A React UI Library by RetailMeNot
The npm package @retailmenot/anchor receives a total of 15 weekly downloads. As such, @retailmenot/anchor popularity was classified as not popular.
We found that @retailmenot/anchor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.