Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Package components for Appcelerator Titanium, Alloy and Arrow projects for distribution and dependencies via NPM.
$ [sudo] npm install -g appc-npm
Simply navigate to your Titanium module or library, Alloy widget, sync adapter, Arrow connector or other component and run the CLI with the command for that component:
$ cd mywidget
$ appc-npm widget
+ alloy-widget-myWidget@1.0.0
$ npm publish
+ alloy-widget-myWidget@1.0.0
Create or update the package.json
for your project:
{
...
"dependencies": {
"alloy-widget-myWidget": "1.0.0"
}
}
Install the dependencies:
$ npm install
> alloy-widget-myWidget@1.0.0 postinstall /Users/fokkezb/myProject/node_modules/alloy-widget-myWidget
> node ./appc-npm
alloy-widget-myWidget@1.0.0 node_modules/alloy-widget-myWidget
After which you'll find the widget in:
./app/widgets/myWidget
You can add dependencies to other Appcelerator dependencies on NPM to the package.json
of your packaged component. So if your Alloy widget depends on a library, module or other widget then you can install them all in one go.
$ npm install
> alloy-widget-myWidget@1.0.0 postinstall /Users/fokkezb/myProject/node_modules/alloy-widget-myWidget
> node ./appc-npm
> ti-lib-xp.ui@1.0.0 postinstall /Users/fokkezb/myProject/node_modules/alloy-widget-myWidget/node_modules/ti-lib/xp.ui
> node ./appc-npm
alloy-widget-myWidget@1.0.0 node_modules/alloy-widget-myWidget
├── ti-lib-xp.ui@1.0.0
After which you'll find the widget and the lib it depends on in:
./app/widgets/myWidget
./app/lib/xp.ui.js
Run the command again to update the packaged installer, update the version (for components like Alloy widgets) and add missing files to copy.
$ appc-npm widget
+ alloy-widget-myWidget@1.0.1
You can use the following commands or types of components:
widget
Alloy Widgets. Searches for widget.json
to determine the base path and adds controllers
, views
, styles
, lib
, assets
and i18n
directories to the list of paths to copy to the project. The default package name is alloy-widget-<id>
and the version is read from widget.json
as well.
sync
Alloy sync adapters. Searches for the first .js
to determine the base path and adds that file to the list of paths to copy to the project. The default package name is alloy-sync-<filename>
and version is 1.0.0
.
lib
Titanium, Alloy or Arrow CommonJS libraries. Searches for the first .js
to determine the base path and adds that file to the list of paths to copy to the project. The default package name is appc-lib-<filename>
and version is 1.0.0
.
module
Titanium modules. Searches for the most recent ZIP file and adds that file to the files
field of the package.json
so that only that file and our installer will be published to NPM. It also reads the manifest
to use in the default package, which is ti-module-<id>
, and for the version.
block
Arrow post or pre-blocks. Searches for the first .js
to determine the base path and adds that file to the list of paths to copy to the project. The default package name is arrow-block-<filename>
and version is 1.0.0
.
connector
Arrow connectors. Searches for appc.json
to determine the base path and adds that same directory to the list of paths to copy. The existing package.json
is updated with the postinstall
script and appc-npm
property containing the list of paths.
FAQs
Package components for Appcelerator Titanium, Alloy and Arrow projects for distribution via NPM.
The npm package appc-npm receives a total of 0 weekly downloads. As such, appc-npm popularity was classified as not popular.
We found that appc-npm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.