
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
cr-template
Advanced tools
This is a basic project template for ractive-player.
Clone this repository, then do
npm install
Compile in development mode:
webpack --watch
Now open the page and click on the recording (circle) icon in the controls.
Select Markers for recording (to record Audio, you must access the page over HTTPS). Use the keyboard command to start/stop recording. Then:
Save the audio file (if any) to audio/audio.webm
.
Copy the markers to src/markers.ts
.
Copy the code recording to src/recordings.ts
.
To view the code recording, change src/production/media-url.ts
to export "."
. (Once you are satisfied with your recording, you should upload your audio files to a static assets host and put that as the media URL instead.) Then compile in production mode:
NODE_ENV=production webpack
See the Mastering guide for how to fix the browser recording (which doesn't come with the metadata needed for seeking) and convert it to mp4.
To generate thumbnail previews for the ractive, use rp-master thumbs
. These should again be uploaded to your static assets host.
To produce a static rendering of the ractive, use rp-master render
.
Beware that @env
is a magic directory that refers to either src/development
or src/production
depending on NODE_ENV
. This is specified in webpack.config.js
.
FAQs
Standard template for create-ractive
We found that cr-template demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.