Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
cr-template
Advanced tools
This is a basic project template for ractive-player.
Clone this repository, then do
npm install
Compile in development mode:
webpack --watch
Now open the page and click on the recording (circle) icon in the controls.
Select Markers for recording (to record Audio, you must access the page over HTTPS). Use the keyboard command to start/stop recording. Then:
Save the audio file (if any) to audio/audio.webm
.
Copy the markers to src/markers.ts
.
Copy the code recording to src/recordings.ts
.
To view the code recording, change src/production/media-url.ts
to export "."
. (Once you are satisfied with your recording, you should upload your audio files to a static assets host and put that as the media URL instead.) Then compile in production mode:
NODE_ENV=production webpack
See the Mastering guide for how to fix the browser recording (which doesn't come with the metadata needed for seeking) and convert it to mp4.
To generate thumbnail previews for the ractive, use rp-master thumbs
. These should again be uploaded to your static assets host.
To produce a static rendering of the ractive, use rp-master render
.
Beware that @env
is a magic directory that refers to either src/development
or src/production
depending on NODE_ENV
. This is specified in webpack.config.js
.
FAQs
Standard template for create-ractive
The npm package cr-template receives a total of 0 weekly downloads. As such, cr-template popularity was classified as not popular.
We found that cr-template demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.