
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
art-build-configurator
Advanced tools
Tools for configuring npm (package.json) and webpack (webpack.config.js)
Tools for configuring npm (package.json) and webpack (webpack.config.js)
NOTE: Your directory-name is used to initialize various files including package.json, so pick a good name.
# replace "my-app-name" with your appo's name
mkdir my-app-name
cd my-app-name
# create package.json forces npm to install in your directory
echo "{}" > package.json
# install & configure abc
npm install art-build-configurator
npx art-build-configurator --init app --git
# install newly configured dependencies
npm install
# start your app
npm start
Then go to: http://localhost:8080/webpack-dev-server/
After you have your app initialized, create a git repository so you have a working state to roll back to as you work:
git init
git add * ".[a-zA-Z]*"
git commit -a -m 'initial checkin'
package.json
The original motivation for ABC is the problem that package.json
is not code. There is no way to dynamically configure it with plain npm + node. ABC solves that. ABC's config file art.build.config.{caf/coffee/js}
is evaluated before it is applied. You can execute arbitrary code to generate and return the config object.
The output package.json file is generated as follows:
defaultPackage = ABC's default package.json
package = ArtBuildConfig.npm || ArtBuildConfig.package
(two aliases):
deepMerge defaultPackage, package
package(defaultPackage)
Config:
import &ArtStandardLib
loaders:
json: (rawJsonString, generator) ->
consistentJsonStringify deepMerge current, generator current = JSON.parse rawJsonString
# Gets applied when you run the "abc --configure" command
generators:
###
An array or object
<array>
Elements are functions or objects
<Functions> are invoked and passed the selected folder, fully qualified.
<objects>
each value, key in object
switch value
when value is String
key is the filename
value is the contents to write
when value is Function
key is the filename
function is invoked and passed in the current contents of the file, if any. The return value is written fo the file.
If there is a matching loader for the filename's extension, It is used.
when value is Array
key is a folder
create the folder if it doesn't exist
recurse with the root algorythm in this sub-folder
###
package.json: ->
description: "The best package ever!"
&ArtBuildConfigurator.loaders.json &ArtBuildConfigurator.Builder.webpack
FAQs
Tools for configuring npm (package.json) and webpack (webpack.config.js)
The npm package art-build-configurator receives a total of 226 weekly downloads. As such, art-build-configurator popularity was classified as not popular.
We found that art-build-configurator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.