
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
build-front-container
Advanced tools
[](https://travis-ci.org/alfa-bank-dev/build-front-container)
Warning! build project inside container works very slow with docker-machine on Mac.
The main goal of this project is to uniform the process of building web applications. We heavily use Docker in our build process. We can divide the build process into two stages:
We recommend creating artifacts in the specially prepared docker-container. Although, you can build you artifacts on the host, but building project inside container has some benefits:
The first stage requires build.sh script. You can use already prepared scripts(see ./build-scripts) or you can put your own one. So this bash script will run inside docker container and in the end, we'll get some files.
Then we need to put these files into container. For this purpose, two archives create:
And then just put them inside the image(see Dockerfile).
It's better not to add the build-front-container module to the package.json as a dependency. But install it manually before build.
See output from
./node_modules/.bin/build-front-container --help
Add command to your npm-scripts. E.g.:
$ grep scripts -A 1 package.json
"scripts": {
"build-front-container": "build-front-container",
By default all artifacts will be put into .build directory. It's also possible to specify output directory. E.g.:
$ grep scripts -A 1 package.json
"scripts": {
"build-front-container": "build-front-container --output-dir .build-xxx",
You can specify what build script to use for building project. E.g.:
$ grep scripts -A 1 package.json
"scripts": {
"build-front-container": "build-front-container --build-script-path ./build.sh"
You can choose one of predefined build scripts. E.g.:
$ grep scripts -A 1 package.json
"scripts": {
"build-front-container": "build-front-container --project-type webpack"
FAQs
[](https://travis-ci.org/alfa-bank-dev/build-front-container)
The npm package build-front-container receives a total of 0 weekly downloads. As such, build-front-container popularity was classified as not popular.
We found that build-front-container demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.