Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
cne-redis-deploy
Advanced tools
Conde Nast Entertainment's CUSTOM redis deploy package for thescene frontend
This is a redis-adapter implementation to use Redis with ember-cli-deploy.
This was cloned and modified from here.
Kind of a hack since the feature I'm emulating is partially coming in ember-cli-deploy v0.5.0. Basically, we parse the index file and only store the relevant file references instead of the WHOLE index. This is useful if your server adds a large amount of markup to each route, and you are only interested in the javascript/css sources.
WARNING. Implementation is SPECIFIC to thescene-frontend. No real reason to change it.
Instead of an index file, json gets stored like this:
{
"scripts": {
"vendor":"<your vendor script, I.E. /assets/vendor.js>",
"app":"<your app script, I.E. /assets/<your app name>.js>"
},
"stylesheets": {
"vendor":"<your vendor script, I.E. /assets/vendor.js>",
"app":"<your app script, I.E. /assets/<your app name>.js>"
},
"environment": {
"content":"<the content property of your environment meta tag>",
"name":"<your-app-name>/config/environment"
}
}
And then on the server:
<head>
<!-- `@cli_assets` points to the object above, fetched from redis -->
<!-- Ember needs this meta tag to determine your apps environment -->
<meta name="<%= @cli_assets['environment']['name'] %>" content="<%= @cli_assets['environment']['content'] %>">
<!-- ...lots of other meta tags... -->
<link rel="stylesheet" href="<%= @cli_assets['stylesheets']['vendor'] %>">
<link rel="stylesheet" href="<%= @cli_assets['stylesheets']['app'] %>">
</head>
<body>
<noscript>
<!-- a bunch of stuff rendered for robots and stuff -->
</noscript>
<script id="vendor-script" src="<%= @cli_assets['scripts']['vendor'] %>"></script>
<script id="app-script" src="<%= @cli_assets['scripts']['app'] %>"></script>
</body>
FAQs
Conde Nast Entertainment's CUSTOM redis deploy package for thescene frontend
The npm package cne-redis-deploy receives a total of 1 weekly downloads. As such, cne-redis-deploy popularity was classified as not popular.
We found that cne-redis-deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.