
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@rishabhgrg/membersjs-test
Advanced tools
Drop-in script to make the bulk of members work on any theme
Drop-in script to make the bulk of members work on any theme
git@github.com:TryGhost/members.js.git
cd members.js
yarn
rish-upstream as remote on your local Ghost repo -git remote add rish-upstream git@github.com:rishabhgrg/Ghost.git
git fetch rish-upstream membersjs && git checkout membersjs
yarn build to create the minified bundle with your changes at umd/members.min.jsmembers.min.js from above and paste it in your theme at assets/built/members.min.jsdefault.hbs just above {{{block "scripts"}}} to add and initialize members script<script src="{{asset "built/members.min.js"}}"></script>
<script>
// Pass Admin URL
var data = {
adminUrl: window.location.origin + "/ghost",
};
// Initialize members.js
window.GhostMembers.initMembersJS(data);
</script>
In the project directory, you can also run:
yarn startRuns the app in the development mode.
Open http://localhost:3000 to view it in the browser.
The page will reload if you make edits.
You will also see any lint errors in the console.
Note: You'll need to configure the local Admin API url for script initialization.
.env.development.local.example to .env.development.localyarn buildCreates the production single minified bundle for external use in umd/members.min.js.
yarn testLaunches the test runner in the interactive watch mode.
See the section about running tests for more information.
Before shipping, please ensure the intended version is updated in package.json.
npm publish --access public to ship the new version to npm and unpkg.
yarn build (prePublish)@tryghost/members-js and creates an unpkg link for script at https://unpkg.com/@tryghost/members-js@VERSIONThis project was bootstrapped with Create React App. You can learn more in the Create React App documentation.
Copyright (c) 2020 Ghost Foundation - Released under the MIT license.
FAQs
Drop-in script to make the bulk of members work on any theme
We found that @rishabhgrg/membersjs-test demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.