Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
apostrophe
Advanced tools
ApostropheCMS is a full-featured, open source CMS built with Node.js that seeks to empower organizations by combining in-context editing and headless architecture in a full-stack JS environment.
Documentation »
Demo
·
Roadmap
·
Report Bug
ApostropheCMS is content software for everyone in an organization. It helps teams of all sizes create dynamic digital experiences with elegance and efficiency by blending powerful features, developer happiness, and a low learning curve for content creators. Apostrophe has powered websites and web apps for organizations large and small for over a decade.
To get started with Apostrophe 3, follow these steps to set up a local development environment. For more detail, refer to the A3 getting started guide in the documentation.
We recommend installing the following with Homebrew on macOS. If you're on Linux, you should use your package manager (apt or yum). If you're on Windows, we recommend the Windows Subsystem for Linux.
Software | Minimum Version | Notes |
---|---|---|
Node.js | 10.x | Or better |
npm | 6.x | Or better |
MongoDB | 3.6 | Or better |
Imagemagick | Any | Faster image uploads, GIF support (optional) |
Discord - Twitter - Discussions
We eagerly welcome open source contributions. Before submitting a PR, please read through our Contribution Guide
ApostropheCMS is released under the MIT License.
3.2.0 - 2021-08-13
req.hostname
now works as expected when trustProxy: true
is passed to the @apostrophecms/express
module.modules
section of app.js
. This was always intended only as a way to load direct, intentional dependencies of your project. However, since npm "flattens" the dependency tree, dependencies of dependencies that happen to have the same name as a project-level Apostrophe module could be loaded by default, crashing the site or causing unexpected behavior. So beginning with this release, Apostrophe scans package.json
to verify an npm module is actually a dependency of the project itself before attempting to load it as an Apostrophe module.toolbarToAllowedStyles
method in the rich text widget, which was not returning any configuration.chokidar
, which Apostrophe and Nunjucks use for template refreshes. In most environments this worked anyway due to an indirect dependency via the sass
module, but for stability Apostrophe should depend directly on any npm module it uses.FAQs
The Apostrophe Content Management System.
The npm package apostrophe receives a total of 2,441 weekly downloads. As such, apostrophe popularity was classified as popular.
We found that apostrophe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.