
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@theforeman/vendor
Advanced tools
foreman supported 3rd-party node_modules
npm install --save @theforeman/vendor
Add the ForemanVendorPlugin
to your webpack plugins:
// webpack.config.js
const ForemanVendorPlugin = require('@theforeman/vendor');
module.exports = {
entry: { ... },
output: { ... },
module: { ... },
plugins: [
new ForemanVendorPlugin({ mode: 'production' }),
...
],
};
attribute | default value | description |
---|---|---|
mode | production | Can be set to development or production so the plugin will use the correct version of the provided 3rd-parties. |
@theforeman/vendor
based on patternfly-react. It build the patternfly-react partials into the ./dist/foreman-vendor.bundle.css
and provides their variables and mixins sets to reuse.
@import "~@theforeman/vendor/scss/variables";
@import "~@theforeman/vendor/scss/mixins";
See @theforeman/vendor-dev for development installation.
This project use webpack
to produce development
and production
versions of bundled javascript
and css
files together with a manifest.json
and a webpack-plugin
to use by the consumer.
To build them into the ./dist
folder, run:
# build bundled production, development, webpack-plugin, scss and docs
npm run build
# build bundled production and development
npm run build:bundle
# build bundled production
npm run build:bundle:prod
# build bundled development
npm run build:bundle:dev
# build the webpack-plugin
npm run build:plugin
# build the scss files
npm run build:scss
# build docs
npm run build:docs
# build docs analyze html report
npm run build:docs:analyze
# build docs about scss
npm run build:docs:scss
Running npm run build
will produce ./dist
, ./scss
and ./docs
folders with the following files:
packages/vendor/dist
├── foreman-vendor.bundle-[version]-development-[hash].css
├── foreman-vendor.bundle-[version]-development-[hash].css.gz
├── foreman-vendor.bundle-[version]-development-[hash].css.map
├── foreman-vendor.bundle-[version]-development-[hash].css.map.gz
├── foreman-vendor.bundle-[version]-development-[hash].js
├── foreman-vendor.bundle-[version]-development-[hash].js.gz
├── foreman-vendor.bundle-[version]-development-[hash].js.map
├── foreman-vendor.bundle-[version]-development-[hash].js.map.gz
├── foreman-vendor.bundle-[version]-production-[hash].css
├── foreman-vendor.bundle-[version]-production-[hash].css.gz
├── foreman-vendor.bundle-[version]-production-[hash].css.map
├── foreman-vendor.bundle-[version]-production-[hash].css.map.gz
├── foreman-vendor.bundle-[version]-production-[hash].js
├── foreman-vendor.bundle-[version]-production-[hash].js.gz
├── foreman-vendor.bundle-[version]-production-[hash].js.map
├── foreman-vendor.bundle-[version]-production-[hash].js.map.gz
├── manifest.development.json
├── manifest.development.json.gz
├── manifest.production.json
├── manifest.production.json.gz
└── vendor-webpack-plugin.js
0 directories, 21 files
packages/vendor/docs
├── scss
│ ├── mixins.scss
│ └── variables.scss
├── stats.development.html
└── stats.production.html
1 directory, 4 files
packages/vendor/scss
├── mixins.scss
└── variables.scss
0 directories, 2 files
This project uses eslint
with patternfly-react:recommended
rules, to lint your code run:
npm run lint
Please checkout the contributing.md
, the roadmap.md
and the open issues.
FAQs
foreman supported 3rd-party node_modules
The npm package @theforeman/vendor receives a total of 743 weekly downloads. As such, @theforeman/vendor popularity was classified as not popular.
We found that @theforeman/vendor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.