
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This repository contains dev-op code for startup, deploy & bump repos.
Dockerfiles and everything needed to run the entire infrastructure.
To work on this project you only need nodejs stable and then just run:
npm run build: to build the environment assets.
npm start: to start the infrastructure.
npm run build [:SSH_KEY] [:CLEAN]: build the entire environment. This has an optional parameter to set the ssh key for cloning repos. You can use it by running npm run build -- /path/to/ssh_key.npm run build:module [:MODULE] [:SSH_KEY] [:CLEAN]: build some specific module.npm start [:ENVIRONMENT] [:DETACHED]: start some specific infrastructure on docker compose. Available infrastructures are inside the folder environment. By default, is complete.npm run stop [:ENVIRONMENT]: stops some specific infrastructure. Available infrastructures are inside the folder environment. By default, is complete.npm run modules:version: shows current module versions.npm run modules:update: update the module version with the latest.npm run libraries:version: shows current libraries versions.npm run libraries:update: update the libraries version with the latest.npm run configuration:show: this will retrieve the configuration values for the repositories.npm run configuration:encrypt: this will encrypt the rust file to generate the pocket configuration binary.npm run configuration:decrypt: this will decrypt the rust file to generate the pocket configuration source code.npm run start:tmux [:WORKSPACE_PATH]: this is a script to be used by developers who use tmux terminal in order to start everything on a tmux terminal.You can review this here.
If you are working on a UI and you want to have all the backend side working you can
just run npm run start:backend in order to start the message producer, event bus and backend modules.
Then you can start the UI project to consume the producer Rest API.
If you work on some specific module you can just start kafka and then start the different modules separately.
To do so you have to run npm run start:kafka, that will start only the event bus.
If you want to select which modules to start or not you can modify the files under environment/[arch].compose.yml.
To run everything you just have to execute npm start and that will start the entire architecture.
By default, when you run npm run build will generate images for the latest versions of the different modules.
You can change that in the file modules.json in the root of the project.
FAQs
This repository contains dev-op code for startup, deploy & bump repos.
We found that cb-admin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.