
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@sifrr/dev
Advanced tools
Development tools for sifrr packages, webapps
Type | Size |
---|---|
Normal (dist/sifrr.dev.cjs.js ) |
getRollupConfig
Rollup configs to bundle JavaScript/TypeScript for node packages, es modules and browser packs. Supports node syntax as well as es module syntax, and TypeScript.generateChangelog
Generate Changelog during releaseloadDir
Load directory recursivelyeslintrc
ESLint config and prettierdeepMerge
Deep Merge ObjectscheckTag
check if a tag exists on githubexec
async execute a shell command with stdout and stderrgitAddCommitPush
run command > git add files > git commit > git pushrunTests
Run a full fledged test suite using mocha, chai, sinon, puppeteer, etc. Supports node syntax as well as es module syntax.Just add .huskyrc
and you are good to go.
Add this to your eslintrc
config
{
extends: ['sifrr']
}
and add pre-commit hook in your .huskyrc
{
"hooks": {
"pre-commit": "yarn eslint --fix \"src/**/*.js\" && git add -A"
}
}
sifrr eslint config extends prettier config and plugin, you can add prettier.config.js
if you want to change default options for prettier.
add commit-msg hook in your .huskyrc
{
"hooks": {
"commit-msg": "yarn commitlint -e $HUSKY_GIT_PARAMS"
}
}
add commitlint.config.js
to your root folder
module.exports = {
extends: ['@commitlint/config-conventional']
};
set COVERALLS_REPO_TOKEN
environment variable, run tests with lcov
reporter, Upload with this command:
cat ./coverage/lcov.info | yarn coveralls
Add tihs to your .eslintrc.js
module.exports = {
extends: ['@sifrr']
};
Add prettier.config.js
, and it will be picked by eslint. Add prettier extension in code editor you use for best use.
FAQs
All you need to develop packages/apps.
We found that @sifrr/dev demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.