Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
blake source_directory target_directory
blake source_directory target_directory source_file ...
In the first synopsis form, blake writes all files generated from input data in the source_directory
to the target_directory
. In the second synopsis form, just the file generated from the source_file
is written to the target_directory
. You can also generate from multiple source files.
Blake is a Node.js module that provides a simple, blog aware, and view agnostic infrastructure to generate static websites. For unrestricted choice of input formats and template languages, blake confines itself to IO and template routing; it delegates the actual file generation to user-written view modules. Blake runs asynchronously; it can be used from command-line or as library.
Generate all files:
var blake = require('blake');
blake.bake('input', 'output', function(err) {
// Site generated
});
Generate a specific file:
var blake = require('blake');
blake.bake('input', 'output', 'input/about.md', function(err) {
// About page generated
});
Generate multiple specific files:
var blake = require('blake');
var input = 'path/to/input';
var output = 'path/to/output';
var fileA = path.resolve(input, 'home.md');
var fileB = path.resolve(input, 'archive.md');
blake.bake(input, output, fileA, fileB, function(err) {
// Home and archive page generated
});
At startup blake requires a configuration module, which has to export paths and a map of user-written functions that implement the actual generation of output artifacts. According to the configuration module blake reads all input data files. At the top of each input file blake expects a JSON header. From the header and the content of the input file blake constructs a source object, with which it applies the bake
function of the according view module. This is done for all input files in parallel. The static resources are copied to the output directory as they are.
Consider the following example of a configuration module:
// This module covers configuration.
// Export path conventions for input data.
exports.paths = {
data: 'data', // required
templates: 'templates', // required
resources: 'resources', // optional
posts: 'data/posts' // optional
};
// Export map with bake functions by template names.
exports.bakeFunctions = {
'rss.jade': require('./rss.js').bake,
'article.jade': require('./article.js').bake,
'home.jade': require('./home.js').bake,
'about.jade': require('./about.js').bake,
'archive.jade': require('./archive.js').bake
};
The paths
object defines input paths, where the two required directories are data
and templates
. From data
blake loads general input data; from templates
templates. The two optional directories are resources
and posts
. The content of resources
is copied to output as it is. The posts
directory hosts blog posts.
The bakeFunctions
object is a map of user-written functions which implement the actual generation of output artifacts. Theses functions are mapped by template name.
At the top of each input file blake expects a JSON string that is interpreted as header and provides parameters for generating. Besides it can contain additional user defined data—a raw version of the header is passed to the bake
methods of the views. The input data for a blog entry could look like the following:
{
"title": "Example",
"description": "An example article",
"template": "article.jade",
"date": "2012-03-21"
}
The content of the example article.
The end of the header is marked by an empty line. Everything that follows is interpreted as content and is passed to the views untouched.
JSON at the top of an input file:
{
"title": "Example",
"description": "An example article",
"template": "article.jade",
"date": "2012-03-21",
"path": "2012/03",
"name": "example"
}
title
is the title of the page (optional)description
is the description of the page or rather the post (optional)template
is the filename of template to use (required)date
is the publish date, if not provided it's set to NOW
(optional)path
is the output path, if not provided the path of the input file is used (optional)name
is used as filename of the output file, if not provided the filename of the input file is used (optional)The header is extendable with arbritrary fields, which can be interpreted by the views. The source object, passed to the views, provides a reference to the header object.
If you decide to mirror input file path and name in your output, you can omit path and name. In that case a typical header of a blog post might look like the following.
{
"title": "Example",
"description": "An example article",
"template": "article.jade",
"date": "2012-03-21",
}
An input file can consist of just the header; for example an RSS feed:
{
"title": "Blog",
"description": "Just my blog.",
"link": "http://my.blog",
"template": "rss.jade",
"name": "rss.xml"
}
Views must export a bake
function with this signature:
bake (src, callback)
In this function you implement the transformation from input to output and pass the result to the callback.
The src
object for a exemplary blog post exposes the following (for brevity body
and template
appear shortened):
header: { title: 'Closure',
description: 'A function together with a referencing environment',
template: 'article.jade',
date: Tue, 18 Oct 2011 00:00:00 GMT,
name: 'closures.html',
path: '/2011/10' },
body: '…',
paths: { outputPathName: '../website',
pathToResources: 'resources',
pathToData: 'data',
templatesPathName: 'templates',
posts: 'data/posts',
config: 'views/config.js' },
filename: 'data/posts/2011/10/closures.md',
date: Tue, 18 Oct 2011 00:00:00 GMT,
templatePath: 'templates/article.jade',
path: '../website/2011/10',
name: 'closures.html',
link: '/2011/10/closures',
dateString: 'Tue Oct 18 2011',
template: '…'
To see a simple example:
git clone git://github.com/michaelnisi/blake.git
cd blake/example
node generate.js
To evaluate a more elaborated example, you could generate my personal site, which requires Jade and Markdown:
npm install -g blake
npm install blake jade markdown
git clone git@github.com:michaelnisi/michaelnisi.git
blake michaelnisi /tmp/michaelnisi-site
You might want to read the documentation of the views for this site, which are written in CoffeeScript; not to put you off, just to give it a shot—I found the use case rather fitting.
Of course you can build your site locally and upload it to your webserver manually, but I recommend to run Blake on a server, and use post-receive hooks to automatically generate your site on the server everytime you push to your input data repository.
Install via npm:
npm install -g blake
If you not want to use command-line blake, install without global flag:
npm install blake
To install from source:
git clone git://github.com/michaelnisi/blake.git
cd blake
npm link
FAQs
Generate anything
The npm package blake receives a total of 30 weekly downloads. As such, blake popularity was classified as not popular.
We found that blake demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.