Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
astro-content
Advanced tools
~
Documentation / Live demo website
❀✿❀ 𝚊𝚕𝚙𝚑𝚊
👷🏻♂️ Under heavy development, use it at your own risk! 🚧
~
Contributions are welcome
👐
Think of it as an hybrid of Wordpress + ACF, Obsidian and Ulysses, with a sprinkle of tRPC and nuxt/content.
✨ Adds a thin layer between Astro and your templates, bringing automatic typings, runtime validation and a handful of DX goodies.
🏗 Brings evolved authoring assistance, in a full-fledged back-office, inside your IDE or with CLI, as you prefer.
Being content centric, this set of tools will give you:
Warning: This is an
alpha
product — Heavy changes are on-going — Suggestions are welcome 👐
With yarn
, npm
or pnpm
, run this in your existing Astro project:
# If you want a fresh start ——v
# pnpm create astro && cd ./my-astro-site
pnpm astro add astro-content
pnpm content setup
Follow the prompts… 🐇
Shallow clone this minimal Astro starter, which comes with dummy content for you to play with:
pnpx degit JulianCataldo/astro-content/demo ./ac-demo
cd ./ac-demo && pnpm install
# Clone dummy content
pnpx degit JulianCataldo/astro-content/docs/content/@dummy ./content
# —OR— setup a minimal content base with Astro Content CLI
pnpm content setup
# Open project in VS Code
code .
Warning: Only Node 17 or higher is actually supported by Astro Content.
OK, project is ready. It's time to:
pnpm run dev
Now head over to http://localhost:3000/__content to take a deep dive in Astro Content.
It's OK to use an absolute path, so you don't have to do tedious relative imports:
import { get } from '../../content';
// Versus:
import { get } from '/content';
Astro / Vite resolve absolute paths from project root.
That's cool,
but TypeScript language server (in your IDE) will likely break, while showing
red squiggles 🤨.
A very simple fix is adding this to your tsconfig.json
> compilerOptions.paths
:
{
"compilerOptions": {
// …
"paths": {
// Make TS happy with absolute path
"/content": ["./content"]
}
}
}
Note:
pnpm
is the package manager of choice for developing this mono-repo.
macOS / Node >= 17 is the most tested environment. Please note that end-user can use anything recommended for a typical Astro project while using Astro Content distributables.
git clone git@github.com:JulianCataldo/astro-content.git
cd astro-content
pnpm -r i
# ———— Watch / build mono-repo. (turbo)
pnpm run dev
# ———— Doc. website (astro)
cd docs && pnpm run dev
Role | Notes | Name | Artefact |
---|---|---|---|
Integration (Entrypoint) | Extends Astro / Vite capabilities | astro-content | |
Server | Data handlers, API provider, helpers generator | @astro-content/server | |
Command line | Project setups and content manipulation | @astro-content/cli | |
Web app (Optional) | Full-fledge content editor / monitor | @astro-content/gui | |
TypeScript typings | Internal types for development use | @astro-content/types | |
Docs (Private) | Using and demonstrating all tools above | astro-content.netlify.app | |
Demo (Clonable) | Minimal boilerplate | ./demo |
@astro-content/*
are all internal dependencies of the main astro-content
integration package, which act as a bridge for them.
Web GUI can be opted out by user settings.
[feat-branch]
)Preview experiments or future additions in isolation.
[branch]--astro-content.netlify.app/__content
master
)astro-content.netlify.app/__content
develop
)Les bugs glissent sur vous comme les gouttes d'eau sur le plumage d'un canard. 💦🦆
develop--astro-content.netlify.app/__content
FAQs
Unknown package
The npm package astro-content receives a total of 4 weekly downloads. As such, astro-content popularity was classified as not popular.
We found that astro-content demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.