
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@scopethis/lead-core
Advanced tools
## Contents - [Lead Mappa core](#lead-mappa-core) - [Contents](#contents) - [What's this repo for?](#whats-this-repo-for) - [How do I get going?](#how-do-i-get-going) - [What about the frontend?](#what-about-the-frontend) - [What's the code styl
The source files in this repo act as the central module of functionality for the Lead Mappa Platform.
Code is organised around core elements (Domains). For example, a lead, a user, or a job. Each domain contains "adapters" that perform a single task, such as "update profile" or "assign lead".
There are no controllers. Just adapters that attempt to follow the Clean Architecture code style.
To get going do the following:
The following will spin up a dockerised version of the database
cd supabase supabase startsupabase reset will undo any changes not captured in migrationThe following will download and install the dependencies and then start the test watchers.
npm installnpm run devāš Please note that when Supabase starts for the first time, it will provide keys that need to be placed in the appropriate env files. Subsequent start and stop commands will not change the keys. However, upgrading Supabase or asking Docker to download again will renew the keys.
The source files for the frontend and server are held in another repo. However, to ensure data integrity, with regard to testing, it makes sense to duplicate the migrations folder and start another instance of Supabase.
If you use "supabase-integration/supabase" as the directory name it will automatically be ignored by Git. You can then cd supabase-integration/supabase and run supabase start. Anything done in that folder will not be committed. So you can configure it differently to suit the frontend:
None yet, however, there is an overall architecture that is being followed, so please stick to that. Dependency Injection is being used throughout, but this is done in a consistent manner so should be easy to follow.
Conventional commits are being used, and a linter is in place, which is triggered by commit hooks, so please follow that, or your commits will be rejected by the linter.
This package is consumed as an NPM library. So we have to build before we release:
npm run build to test the code and compile everythingnpm run release:[patch|minor|major] to tag, create a release and publish to NPM.The test files are a good place to start to understand how the package can be used. As well as this, each domain should have a README file detailing how it's used. The basic pattern of use is shown below
npm install @scopethis/lead-core
...
// commonjs
const container = require('@scopethis/lead-core').default
const result = container('DomainAdapter', data)
// ES6 - NOT PUBLISHED. Only used in this repo
import container from '../../src'
const result = await container('DomainAdapter', data)
// Where 'DomainAdpater' is the resolved functionality
// And data is the structured option passed to it
FAQs
## Contents - [Lead Mappa core](#lead-mappa-core) - [Contents](#contents) - [What's this repo for?](#whats-this-repo-for) - [How do I get going?](#how-do-i-get-going) - [What about the frontend?](#what-about-the-frontend) - [What's the code styl
We found that @scopethis/lead-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago.Ā It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.