
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@tru_id/cli-plugin-dev-server
Advanced tools
Runs a development server from the tru.ID CLI
To install plugins you'll need the tru.ID CLI v0.6.0@canary
or above.
npm install -g @tru_id/cli@canary
You can then install the plugin using:
$ tru plugins:install @tru_id/cli-plugin-dev-server
tru server
describe the command here
USAGE
$ tru server
OPTIONS
-h, --help show CLI help
-p, --port=port [default: 8080] The port the server should listen on
-s, --localtunnel-subdomain=localtunnel-subdomain The subdomain for the local tunnel
-t, --localtunnel Run a localtunnel to expose the server to the Internet
--project-dir=project-dir [default: .] The directory that contains the tru.json Project
configuration file
EXAMPLE
$ tru server
See code: src/commands/server.ts
Ensure the CHANGELOG.md
is updated:
yarn run changelog
Finesse the contents of CHANGELOG.md
and commit.
Tag the version that is being released with the version of the package and, optionally, the tag to be used in NPM:
git tag v{version}@{tag}
Push the update to the remote.
git push v{version}@{tag}
To release a canary version run:
yarn run publish:canary
0.0.2 (2021-02-05)
FAQs
Runs a development server from the tru.ID CLI
The npm package @tru_id/cli-plugin-dev-server receives a total of 0 weekly downloads. As such, @tru_id/cli-plugin-dev-server popularity was classified as not popular.
We found that @tru_id/cli-plugin-dev-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.