
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
cmc-user-manager
Advanced tools
This project is a base application written in Vue 3 to create micro frontends for the ChooseMyCompany software.
src/components: Vue componentssrc/entities: TypeScript entitiessrc/stores: Pinia storessrc/main.ts: Local application entry pointsrc/main.ce.ts: Application entry point for building web componentGo in the root cmc-front directory and run the following commands:
docker compose build scopes
make reset-dist-files
You also need to migrate the legacy data in order to use the application. To do so, run the following command in the ChooseMyCompany folder:
./scopes/scripts/startup-init.sh
To run the application in development mode, run the following command:
docker compose up scopes
The application will be available at http://cmc.local:5004.
The auth will not work locally, you'll have to set the .env SKIP_API to true, then the services will use the mock data stored in the scopes/services/fake-datas folder.
To test the production build locally, first change the docker-compose.yml file to use the production build:
scopes:
container_name: choosemycompany_scopes
build:
context: .
dockerfile: scopes/Dockerfile
target: production-stage
args:
- ENV_NAME=preprod
platform: linux/arm64
working_dir: /srv/app/scopes
volumes:
- ./scopes:/srv/app/scopes
- ./scopes/node_modules:/srv/app/scopes/node_modules:delegated
env_file:
- ./scopes/.env.preprod
ports:
- "5004:5004"
Then build and serv the production image (be careful with docker cache):
docker compose build scopes
docker compose up scopes
docker compose exec scopes yarn preview
Then open test.html with a browser.
To check the CORS configuration in the Scaleway S3, run the following command:
make web-components-get-cors-<env-name>
CORS can be updated in the Scaleway S3 with these commands:
First, edit the configuration file in ./web-components/cors-<env-name>.json.
Then, run the following command:
make web-components-put-cors-<env-name>
Before commit, dont forget to run the following command:
docker compose exec scopes yarn lint-fix # eslint
docker compose exec scopes yarn format # prettier
docker compose exec scopes yarn test # unit tests
To build the web component, run the following command:
docker compose exec scopes yarn build
FAQs
## Overview
We found that cmc-user-manager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.