Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
apostrophe-blog
Advanced tools
This bundle provides a complete foundation for blogging with the Apostrophe CMS.
The bundle consists of three Apostrophe modules (in a single npm module):
apostrophe-blog
apostrophe-blog-pages
apostrophe-blog-widgets
The apostrophe-blog
module provides the ability to create and edit blog posts and manage their publication dates.
The apostrophe-blog-pages
module displays blog posts on a page. It extends the apostrophe-pieces-pages
module. A blog page displays only blog posts whose publication date has arrived.
The apostrophe-blog-widgets
module provides an apostrophe-blog
widget, which you can use to select blog posts to appear anywhere on your site. Posts do not appear until their publication date.
These three modules extend apostrophe-pieces
, apostrophe-pieces-pages
and apostrophe-pieces-widgets
, and you can extend them further as well.
For a single blog:
// in app.js
// We must declare the bundle!
bundles: [ 'apostrophe-blog' ],
modules: {
'apostrophe-blog': {},
'apostrophe-blog-pages': {},
'apostrophe-blog-widgets': {},
'apostrophe-pages': {
// We must list `apostrophe-blog-page` as one of the available page types
types: [
{
name: 'apostrophe-blog-page',
label: 'Blog'
},
{
name: 'default',
label: 'Default'
},
{
name: 'home',
label: 'Home'
}
]
}
}
You can set the contextual: true
option for the apostrophe-blog
module if you prefer to allow the end user to edit the content of the article "in context" on the show.html
page. This is generally the preferred way to go.
You can also set contextual: true
for individual schema fields like body
so that they don't appear in the modal at all.
When contextual: true
is set for the module, the user is redirected to the "show page" for that blog post as soon as they click "save" so that they can edit further.
In addition, the "context menu" (the "Page menu") is enhanced with blogging-related choices when on a blog index page or show page.
One way to create two or more blogs is to create separate blog pages on the site, and use the "with these tags" feature to display only posts with certain tags.
Another approach is to extend
the modules, creating new modules and a completely separate admin bar item for managing the content. If you take this approach, you must set a distinct name
property when configuring your subclass of apostrophe-blog
, such as article
. This will be value of type
in the database for each blog post of this subclass.
The latter approach is often best as it requires less user training to avoid confusion. The former approach has its own advantages, notably that it is easier to aggregate content and have it appear in multiple places intentionally.
The index page includes filters for day
, month
, and year
, meaning that parameters in query strings like &year=2016
will automatically be passed to the mongo query that loads the pieces for your index page. You can refer to these filters in your template by using data.piecesFilters.year
, etc.
2.2.2 (2021-08-03)
FAQs
Blogging for the Apostrophe content management system
The npm package apostrophe-blog receives a total of 94 weekly downloads. As such, apostrophe-blog popularity was classified as not popular.
We found that apostrophe-blog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.