
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
**Requirements** Name|Link/Command to install ----|----------- [aws cdk]()|*https://docs.aws.amazon.com/pt_br/cdk/latest/guide/cli.html* [docker]()|*https://docs.docker.com/engine/install/ubuntu/* [nodeJs]()|*https://nodejs.org/en/download/* [npm]()|*http
Requirements
Classes
| Name | Description |
|---|---|
| Pipeline | Define a new pipeline based in pipeline props, by default execute a synth base step, with command standardNpmSynth, this library has integration with code commit and github, which means your source must be in a repository in code commit or github. |
| LambdaPowerToolsFunction | Define a new lambda function based in props provided by your app, this resourse create a structure with canary deploy and a alarm to watch the bahavior of lambda function. |
How to usi it ?
Clone this repository from: https://github.com/druid-rio/druid-cdk-construct
Execute the command yarn install , to install the project dependecies, after that execute the command projen to verify if your project it's ok. If you see any error try to check if you have all the dependencies installed.
This resource is responsable to create and manipulate the stages of your application, the code bellow, represente one way to use this resource in your app.
Properties
| Name | Description | Required |
|---|---|---|
| BuildCommand | A command to build your code, by defaul execute npm run build. | no |
| DevStageApp | It represents a dev stage to construct your app. | no |
| Repository | It is a construct repository. | no |
| RepositoryName | The name of repository, when this lib is reponsable by create a new repository. | no |
new Pipeline(this, "pipeline", {
repository: repository,
buildCommand: 'make cdk-pr',
qaStage: qaStage
});
getProps(): as PipelineProps
Returns:
{
repository: code_commit.Repository;
buildCommand: string;
repositoryName: string;
devStageApp: Stage;
} \
FAQs
**Requirements** Name|Link/Command to install ----|----------- [aws cdk]()|*https://docs.aws.amazon.com/pt_br/cdk/latest/guide/cli.html* [docker]()|*https://docs.docker.com/engine/install/ubuntu/* [nodeJs]()|*https://nodejs.org/en/download/* [npm]()|*http
We found that cdk-libs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.