
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@upsilon/broccoli-leasot
Advanced tools
A broccoli plugin which wraps around the leasot module to parse and output TODOs and FIXMEs from comments in your files
A broccoli plugin and an ember addon for the leasot module to parse and output markers like TODOs and FIXMEs from comments
npm install --save-dev broccoli-leasot
var broccoliLeasot = require('broccoli-leasot');
var tree = broccoliLeasot(someTree, options);
As a Ember CLI Addon, simply npm install --save-dev broccoli-leasot
and supply the options you would like:
var app = new EmberApp({
markers: {
enabled: true,
kinds: [ 'TODO', 'FIXME', 'CUSTOM']
}
});
broccoliLeasot(inputTree, options)
options.enabled
{true|false}
This will eliminate processing altogether.
Default: false
options.extensions
Array of file types to scan
This indicates the files with specific extensions to be scanned. The complete list can be seen at the leasot repo
Default: ['js', 'css', 'less', 'scss', 'hbs', 'handlebars']
options.kinds
Array of markers
These are the markers looked up in the comments of the files which are scanned.
Default: ['TODO', 'FIXME']
options.groupBy
file|kind
The broccoli plugin prints the analysis of leasot on the console. Users can choose between grouping markers by file name or kind of marker.
Default: file
This plugin is all about productivity so its written in es6/2015 with the help of babel.js. The plugin code is at src/index.js. To see the compiled code run npm run compile
and look at the content of lib\index.js
Interested in using babel for your next npm module, read this excellent article on this.
Running the tests:
npm install
npm test
FAQs
A broccoli plugin which wraps around the leasot module to parse and output TODOs and FIXMEs from comments in your files
We found that @upsilon/broccoli-leasot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.