Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@sewing-kit/tasks
Advanced tools
@sewing-kit/tasks
@sewing-kit/tasks
provides a number of helpful types and interfaces that describe the kinds of things that sewing-kit
can do for your workspace.
This package is closely tied with and extends from @sewing-kit/hooks
and the interfaces it provides.
yarn add @sewing-kit/tasks --dev
Tasks are what sewing-kit
runs against your codebase to perform a variety of things, such as linting, building, and testing. At a high level, sewing-kit
distinguishes between WorkspaceTasks
(which apply to the entire workspace) and ProjectTasks
(which apply to the individual projects within a workspace).
WorkspaceTasks
BuildWorkspaceTask
)DevWorkspaceTask
)TestWorkspaceTask
)LintWorkspaceTask
)TypeCheckWorkspaceTask
)ProjectTasks
BuildProjectTask
)DevProjectTask
)TestProjectTask
)A task (e.g. build
, dev
, test
) is made up of options and hooks. Options exist to configure the task, and can be passed in through sewing-kit
's CLI and propagated through the hooks to relevant plugins. Tasks' hooks expose a way for plugins (either @sewing-kit
's or your own) to tap into and customize and define sewing-kit
's behaviour.
FAQs
APIs for building sewing-kit-next tasks
The npm package @sewing-kit/tasks receives a total of 24 weekly downloads. As such, @sewing-kit/tasks popularity was classified as not popular.
We found that @sewing-kit/tasks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.