Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Note: This README is out-of-date for Bedrock 0.3+.
Bedrock helps you launch your ideas faster by bundling all the best-of-breed tooling that's necessary to build a modern, scalable Web app. It can run on a low-powered laptop all the way up to enterprise servers serving tens of millions of transactions per day.
Bedrock runs on Linux, Mac OS X, and Windows. It uses node.js + Express3 + MongoDB for the server backend while utilizing HTML5 + Bootstrap3 + AngularJS for the front-end. It has REST APIs, user account management, strong cryptography support, DoS protection, digital signatures, Linked Data, and tons of other FEATURES that are active by default. If you don't need all the fancy features, Bedrock is modular, so you can use only the modules you want.
You can follow the following tutorial to setup and use Bedrock on a Linux or Mac OS X development machine.
bedrock.dev
hostname to your machine (see below).To setup an admin user on mongodb:
To setup the bedrock.dev
hostname:
bedrock.dev
.
For example: 192.168.0.15 bedrock.dev
(where 192.168.0.15
is the IP address of your primary network device.Run the following to start up a development server from the source directory:
node bedrock.dev.js
To add more verbose debugging, use the --log-level
option:
node bedrock.dev.js --log-level debug
To access the server:
admin
with the password password
or create a new account.Install protractor (before first test run):
npm run install-protractor
Run all backend and frontend tests:
npm run test
Run just the backend tests:
npm run test-backend
Run just the frontend tests:
npm run test-frontend
Run a specific frontend test suite:
nodejs test.js --frontend --suite unit
npm run coverage
Look at 'coverage.html' using a web browser
npm run minify
To test in dev mode, set the website config var 'minify' to true.
nodejs create-credentials.js
Save the generated private key and certificate PEMs in the appropriate files (in ./pki/ if using the default config).
For a complete list of features included in Bedrock, see the FEATURES file.
See the FAQ file for answers to frequently asked questions.
See the CONTRIBUTING file for various details for coders about hacking on this project.
See the AUTHORS file for author contact information.
Bedrock and all Bedrock modules are:
Copyright (c) 2011-2015 Digital Bazaar, Inc.
All Rights Reserved
You can use Bedrock for non-commercial purposes such as self-study, research, personal projects, or for evaluation purposes. See the LICENSE file for details about the included non-commercial license information.
0.3.2 - 2015-02-24
FAQs
A core foundation for rich Web applications.
The npm package bedrock receives a total of 64 weekly downloads. As such, bedrock popularity was classified as not popular.
We found that bedrock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.