Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
create-github-actions-setup-for-ember-addon
Advanced tools
Setup GitHub Actions for an Ember Addon
Creates GitHub Actions for Ember Addon with NPM init / yarn create command.
This is early alpha software. Use with care and double check the generated GitHub Actions workflow.
# in a yarn repo
yarn create github-actions-setup-for-ember-addon
# in an npm repo
npm init github-actions-setup-for-ember-addon
The configuration to be used depends on the repository. It is determined using this algorithm:
.github/workflows/ci.yml
by a previous run if exists..travis.yml
if one exist.The script tries to calculate sensitive defaults if no configuration from a previous run nor an existing .travis.yml
is found.
The defaults are calculated based on the actual project:
engines.node
key of project's package.json
.package-lock.json
or yarn.lock
.config/ember-try.js
in generated test matrix.launch_in_ci
configuration.before_install
or script
steps are not migrated (yet).Merge requests are very much appreciated. Parts that could be improved are:
Contributing documentation is provided in CONTRIBUTING.md to lower entry barrier. In case you face additional questions do not hesitate to either open an issue or contact me (@jelhan) on Ember Community Discord.
This project is licensed under the MIT License.
FAQs
Setup GitHub Actions for an Ember Addon
We found that create-github-actions-setup-for-ember-addon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.