Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
cordova-coho
Advanced tools
Command line tool for Apache Cordova contributors to manage Apache Cordova repositories, and to help with releases and pull requests.
This repository has the following purposes:
coho create-archive && coho verify-archive
coho repo-clone
coho --help
Easiest way on OS X & Linux: https://github.com/creationix/nvm
Easiest way on Windows: http://nodejs.org/
npm
npm install -g cordova-coho
On Mac OS X / Linux, if you didn't use a node version manager like nvm
or n
, you might have to run the command using sudo
.
coho
mkdir -p cordova
cd cordova
git clone https://github.com/apache/cordova-coho
cd cordova-coho
npm install
npm link # Might need sudo for some configurations
coho repo-update -g -r all
repo-update
will clone a repo if it is missing -- if it exists, it updates it.
The all
repo id will clone all Apache Cordova repositories into the current working directory.
coho --help
or if you know the command:
coho [command] --help
For example:
coho repo-clone --help
To see valid repo ids and repo group ids for use with Coho, use the list-repos
command:
coho list-repos
Note that for some commands you may need to use the -g
or --global
flag to work in an npm global context, since coho was originally designed for use in another context.
Cordova is an open source Apache project and contributors are needed to keep this project moving forward. Learn more on how to contribute on our website.
If you find issues with this tool, please follow our guidelines for reporting issues. We do not use the GitHub issue system as an Apache project, we have a JIRA issue management system which covers over 50+ CLI, platform, and plugin repos in the Cordova project. Use the "cordova-coho" component for Cordova Coho issues.
FAQs
Apache Cordova release tool
The npm package cordova-coho receives a total of 67 weekly downloads. As such, cordova-coho popularity was classified as not popular.
We found that cordova-coho demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.