Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
create-dumi
Advanced tools
[![NPM version](https://img.shields.io/npm/v/{{{ name }}}.svg?style=flat)](https://npmjs.org/package/{{{ name }}}) [![NPM downloads](http://img.shields.io/npm/dm/{{{ name }}}.svg?style=flat)](https://npmjs.org/package/{{{ name }}})
{{{ description }}}
First, introduce css file:
import '{{ name }}/dist/style.css';
Then, introduce components:
<script setup lang="ts">
import { Foo, Bar } from '{{ name }}';
</script>
TODO
# install dependencies
$ {{ npmClient }} install
# develop library by docs demo
$ {{ npmClient }} start
# build library source code
$ {{ npmClient }} run build
# build library source code in watch mode
$ {{ npmClient }} run build:watch
# build docs
$ {{ npmClient }} run docs:build
# Locally preview the production build.
$ {{ npmClient }} run docs:preview
# check your project for potential problems
$ {{ npmClient }} run doctor
# Test
$ {{ npmClient }} test
# Coverage
$ {{ npmClient }} test:cov
# Lint
$ {{ npmClient }} lint
MIT
FAQs
Creator for dumi boilerplate
The npm package create-dumi receives a total of 18 weekly downloads. As such, create-dumi popularity was classified as not popular.
We found that create-dumi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.