Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
[![MIT License][license-image]][license-url] [license-image]: http://img.shields.io/badge/license-MIT-blue.svg?style=flat [license-url]: LICENSE
With ES6 destructuring used, it requires NodeJS >= 6.9.1
.
~ npm install cldoc -g
~ cldoc --help
Usage: cldoc [options] <outputDir> [dirs...]
文档工具
Options:
-h, --help output usage information
-V, --version output the version number
README.md
You may use like this:
~ cldoc build dir1 dir2 README.md
Site: https://www.ykan.space/docs/
Repo: https://github.com/ykan/ykan.github.com
If you just run cldoc build
, your directory should be like:
- documents //put markdown fils here
- common // sub dir
- README.md //sub index, generate common/index.html
- example.md // -> common/example.md.html
- example.ignore.md //if ignore,file will not in nav tree
- README.md // -> index.html
- models // you can replace default-models files here
- example.json
- comment.pug //only use pug
You may also use it in your own build process, like Gulp/Grunt:
const cldoc = require('cldoc')(
'models-dir', // provide a custom model dir, it can be not exits
'output-dir', // dir that put output files
);
cldoc.renderFileTree(['documents', 'another-dir', 'README.md'], (err, item) => {
console.log(`generate ${item.filename}`);
});
// Or just one directory.
cldoc.renderFileTree('documents', (err, item) => {
console.log(`generate ${item.filename}`);
});
\`\`\`config
{
"baseUrl": "//cdn.withme.cn/a/cldoc/0.2.7/",
//foundation.css, gruvbox-light.css, school-book.css
"styleName": "atelier-estuary-light.css"
}
\`\`\`
This block will not be rendered.
The documents/README.md
's config
will be used in layout.pug, for example baseUrl
will use like this:
<link rel="stylesheet" href="//cdn.withme.cn/a/cldoc/0.2.7/cldoc-atelier-estuary-light.css">
Choose code style you like:(highlightjs styles):
atelier-estuary-light.css
foundation.css
gruvbox-light.css
school-book.css
... // and so on
\`\`\`json
{
"example": "{{example.json}}"
}
\`\`\`
models/example.json
:
{
// sss
"x": "sss", //asdjf;jk;
"items": "xxxx"
}
Result:
\`\`\`json
{
"example": {
// sss
"x": "sss", //asdjf;jk;
"items": "xxxx"
}
}
\`\`\`
\`\`\`tpl
example.pug
//First line should be just tpl file name.
{
"name": "xxx"
}
//these are default data provide by code.
/*{
"title": "example", //ddd
"basename": "example",
"keywords": [],
"filename": "example.md.html",
"config": {}
}*/
\`\`\`
models/example.pug
:
.ex= title
Result:
<div class="ex">example</div>
json-table.pug
)\`\`\`tpl
json-table.pug
[
//First Line is title line
{ "name":"名称", "optional":"是否可选", "type": "类型", "desc":"描述" },
{ "name":"是打发打发", "optional":1, "type": "string", "desc":"啊啊士大夫撒打发士大夫撒旦法撒旦法撒旦法师的法师打发士大夫撒旦法法师打发士大夫撒旦法法师打发士大夫撒旦法" },
{ "name":"yushan", "optional":1, "type": "string", "desc":"xxx" },
{ "name":"yushan", "optional":1, "type": "string", "desc":"xxx" },
{ "name":"yushan", "optional":1, "type": "string", "desc":"xxx" }
]
\`\`\`
default-models/json-table.pug
:
table
thead
tr
each key in keys
th= titleRow[key]
tbody
each row in rows
tr
each key in keys
td= row[key]
Result:
FAQs
Example
The npm package cldoc receives a total of 4 weekly downloads. As such, cldoc popularity was classified as not popular.
We found that cldoc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.