Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
A fork of backbone designed for use with lodash and browserify.
npm install backdash
backbone.js
Line 42 changed from:
if (!_ && (typeof require !== 'undefined')) _ = require('underscore');
to:
if (!_ && (typeof require !== 'undefined')) _ = require('lodash');
package.json
Line 8 changed from:
"underscore" : ">=1.4.3"
to:
"lodash": "1.3.1"
This version of backdash is based on Backbone 1.1.0 and Lodash 1.3.1
Use those versions explicitly in any other module that will build into the target project. Multiple versions of lodash in the dependency tree will cause multiple versions to appear in the built browserify bundle.
Also, it is helpful to run npm dedupe
after adding modules to the project in order to optimize files within node_modules
and, consequently, during dependency resolution at build.
First, install lodash and backdash:
npm install lodash
npm install backdash
```
Then, in each `model`/`collection`/`view`/`router`, use exactly like [Backbone](http://backbonejs.org/)
```
var _ = require('lodash');
var B = require('backdash');
var ContentView = B.View.extend({
...
});
```
## Use with a DOM Library
As before, lodash and jQuery (or an api-compatible library such as Zepto) must exist on the `window` (or, as called in backbone source, `root`). When building with browserify, the easiest solution is to either:
- If loading jQuery from a CDN, explicitly set `B.$ = global.$;` immediately after the first `require('backdash')` (likely in the [entry file](https://github.com/substack/node-browserify#baddfile) used to build the project)
- `require('jquery')` before you first `require('backdash')`
FAQs
backbone js with lodash, ready for browserify
The npm package backdash receives a total of 1 weekly downloads. As such, backdash popularity was classified as not popular.
We found that backdash demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.