Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
carbon-codemod
Advanced tools
This is a collection of codemods that help you upgrade to a new version of carbon-react
.
The release notes of carbon-react
will indicate which codemod you should use.
npx carbon-codemod <name-of-codemod> <target>
add-prop
button-destructive
deprecate-create
message-remove-classic-theme
rename-prop
remove-prop
replace-prop-value
tile-update-padding-prop
dialog-full-screen-app-wrapper
Note that <target>
is worked out relative to the current working directory.
carbon-codemod
is a wrapper around jscodeshift
.
npm link
cd my-other-project
npm link carbon-codemod
npx carbon-codemod <name-of-codemod> <target>
To debug the CLI
node --inspect-brk ./bin/carbon-codemod
node --inspect-brk ./bin/carbon-codemod --version
It's also possible to debug the tests
Run Current Spec
in the "Run" paneYou can use astexplorer.net to help understand the existing structure of files. You should use the following settings:
esprima
jscodeshift
The return value of the function determines the status of the transformation:
Status | Condition | Successful |
---|---|---|
ok | A string is returned and it is different from passed source | :white_check_mark: |
skipped | If nothing is returned, the file is not supposed to be transformed | :white_check_mark: |
unmodified | If a string is returned but it's the same as the source | :x: |
error | If the transform throws an Exception | :x: |
npm test
defineTest
to write new tests, this will create a fixture test and an idempotent test.semantic-release
.semantic-release
.semantic-release
will decide, based on the commits that have been merged, if a new release
is required.FAQs
carbon-codemod
The npm package carbon-codemod receives a total of 1 weekly downloads. As such, carbon-codemod popularity was classified as not popular.
We found that carbon-codemod demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.