Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
= a fun blog generator
Table of Contents
Let's see some boowa blogs first, will add more themes later:
npm install boowa -g
mkdir myBlog && cd myBlog
boowa
Select one style from the inquiring list
Start a development server
npm run start
boowa is built with:
so, boowa
boowa
Generate a new blog app in a empty directory
Actually a choo app yeah~, but you only need to handle markdown files and _config.json
boowa create
Run this command to generate a new markdown file contains the necessary structure, and it will build the html file automatically:
⚠️ Put content in markdown-body
:
_config.json
This file contains metadatas like name, email etc.
boowa build
After edit _config.json
or modify markdown files, run this command to generate new templates.
npm run start
Start a development server
npm run build
Compile all files to dist/
boowa serve <port | 8080>
Boowa has a simple built-in server , after npm run build && cd dist
, run this command to serve the production code.
After install the newest boowa, run boowa
in the boowa-existed directory, this update would not rewrite the markdown files and _config.json
.
Service-worker works under https in production mode, so if you want to test the offline function locally, for chrome, run this command first:
/Applications/Google\ Chrome.app/Conts/MacOS/Google\ Chrome --user-data-dir=/tmp/foo --ignore-certificate-errors --unsafely-treat-insecure-origin-as-secure=http://localhost:port
You will see ServiceWorker registration successful with scope: http://localhost:port/
in the developer tool, if service-worker register successfully.
FAQs
☁️☁️🚂☁️☁️ colorful blog generator
The npm package boowa receives a total of 3 weekly downloads. As such, boowa popularity was classified as not popular.
We found that boowa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.