
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
An AfterEffects plugin for karas.
ae-karas
npm install ae-karas
cd ~/Library/Application\ Support/Adobe/CEP/extensions
如果目录不存在就创建一个ln -s 项目根目录/bundle ./ae-karas
软连接ae插件到当前bundle目录defaults write com.adobe.CSXS.10 PlayerDebugMode 1
跑一下这个命令打开开发模式defaults write com.adobe.CSXS.11 PlayerDebugMode 1
高版本的ae可能需要打开11npm run dev
watch编译https://github.com/Adobe-CEP/CEP-Resources/tree/master/CEP_9.x
根据环境选择cefclient
,输入http://localhost:8735
查看log,如果没权限则chmod -R 777https://github.com/Adobe-CEP/CEP-Resources/tree/master/ZXPSignCMD/4.1.2/macOS
加签上传功能需自定义配置src/util/config.js中的URL并实现对应服务端接口后,重新打包。
config.UPLOAD_IMG为上传图片的配置,会post如下数据:
{
data: String,
quality: Number = 0.8,
returnBase64: Boolean,
}
data为图片的base64数据,returnBase64会根据用户勾选传true。
返回数据为:
{
url: String,
base64: String,
}
会根据returnBase64的值来返回压缩后的图片url或者base64数据。
config.UPLOAD为上传JSON的配置,会post一个file数据,并在结果中返回json地址。
蚂蚁内部请使用内部版本,已做好上传。
[MIT License]
FAQs
An AfterEffects plugin for karas.
The npm package ae-karas receives a total of 1 weekly downloads. As such, ae-karas popularity was classified as not popular.
We found that ae-karas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.