Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
A dead simple blogging backend that lets you drop in a Markdown formatted blog to any existing Node.js site. It handles parsing and processing posts, but makes you set up your own site (routes and templates).
There are tons of sweet static content generators out there that are perfect for many sites built from the ground up as blogs, but they do so much for you that it's more difficult to integrate them with existing sites.
Posts are stored in a single folder, with the name format YYYY-MM-DD-title.md
.
The title in the file name is the one you'd use in a URL, and should be free of
weird characters.
Metadata is stored at the beginning of post files in YAML, delimited by ---
.
The remainder of the post is standard Markdown.
Example: 2010-01-23-nodejs-is-web-scale.md
---
title: Node.js is ★Web Scale★
tags:
- Javascript
- Node.js
- Web Scale
---
Just like [MongoDB](http://www.mongodb.org/), Node.js is web scale. That means
it's high-performance.
Why?
----
Blocking IO wasn't built for web scale. **Node.js handles web scale.** You turn it
on and it scales right up.
First:
npm install blog-base
Next, create a Blog
and point it to your post folder:
var Blog = require('blog-base')
var blog = new Blog(__dirname + '/blog-posts')
Then, define some routes for your blog, however you like. Blog
provides these
methods:
blog.posts([offset], [count])
Returns count
posts starting at offset
in reverse chronological order. If offset
and count
are not specified, returns all posts in reverse chronological order.
blog.postsForTag(tag, [offset], [count])
Same as blog.posts
, but returns posts that include the tag tag
.
blog.post(year, month, day, name)
Returns the post published on year
/month
/day
having name name
.
blog.postCount()
Returns the total number of posts.
blog.postCountForTag(tag)
Returns the total number of posts that include the tag tag
.
blog.reloadPosts()
Rebuild the cache of posts from the filesystem. Done automatically on file modification if inotify is installed.
FAQs
An extremely lightweight blogging backend for node.
We found that blog-base demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.