Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
bisheng-chitu
Advanced tools
Bi Sheng was the Chinese inventor of the first known movable type technology.
bisheng
is designed to transform Markdown into static websites and blogs using React.
browserHistory
, even in GitHub Pages.bisheng
in a new projectgit clone git@github.com:benjycui/bisheng-theme-one.git myblog && cd myblog
rm -rf .git && npm i && npm start
open http://127.0.0.1:8000/
bisheng
in current projectInstallation:
npm install --save-dev bisheng
Then, add start
to npm scripts:
{
"scripts": {
"start": "bisheng start"
}
}
Create bisheng.config.js
, otherwise bisheng
will use the default config:
module.exports = {
source: './posts',
output: './_site',
lazyLoad: false,
theme: './_theme',
port: 8000,
};
Note: please make sure that source
and theme
exists, and theme
should not be an empty directory. Just copy bisheng-theme-one to theme
, if you don't know how to develop a theme.
Now, just run npm start
.
We can install bisheng
as a cli command and explore what it can do by bisheng -h
. However, the recommended way to use bisheng
is to install it as devDependencies
.
$ npm install -g bisheng
$ bisheng -h
Usage: bisheng [command] [options]
Commands:
start [options] to start a server
build [options] to build and write static files to `config.output`
gh-pages [options] to deploy website to gh-pages
help [cmd] display help for [cmd]
Options:
-h, --help output usage information
-V, --version output the version number
bisheng
will read bisheng.config.js
as its config file, but we can set the config file name by --config
, something like this bisheng --config another.config.js
.
The content of bisheng.config.js
looks like this:
module.exports = {
source: './posts',
output: './_site',
theme: './_theme',
port: 8000,
root: '/',
plugins: [],
};
To set directory/directories where we place Markdown files.
To set directory where bisheng
will generate (HTML & CSS & JavaScript) files to.
Whether to load Markdown data lazily.
Note: when lazyLoad
is true
, each page data will be a function which will return a promise.
To set directory where we put the theme of website.
To set the port which will be used when we start a local server.
If the website will be deployed under a sub-directory of a domain (something like http://benjycui.github.io/bisheng-theme-one/
), we must set it (such as /bisheng-theme-one/
).
A list of plugins.
module.exports = {
plugins: [
'pluginName?config1=value1&config2=value2',
'anotherPluginName',
],
};
MIT
FAQs
Transform Markdown files into a SPA website using React.
The npm package bisheng-chitu receives a total of 0 weekly downloads. As such, bisheng-chitu popularity was classified as not popular.
We found that bisheng-chitu demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.