
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
create-pantheon-decoupled-kit
Advanced tools
Pantheon's command line interface for creating and adding on to new projects.
A CLI heavily inspired by various create-
apps and generator frameworks
including plop
create-sitecore-jss
,
create-astro
,
and create-create-app
.
To install this package locally, run the following commands from the root of the monorepo.
# build the package
pnpm build:cli
# link the local version of the package to global node_modules
pnpm link ./packages/create-pantheon-decoupled-kit
# run the bin script
pnpm create-pantheon-decoupled-kit
Use the create command to initiate the cli with no arguments and follow the prompts in your terminal
# this will use the latest non-canary version from the npm registry
# to use the latest canary, use pantheon-decoupled-kit@canary
pnpm create pantheon-decoupled-kit
Or, pass in arguments up front to skip those prompts
pnpm create pantheon-decoupled-kit next-wp --appName my-app --outDir ./my-app-dir --force
watch
scriptTo run the watch
script, ensure there is a watch.{ts,js}
file at the root of
this package. The watch file should export a named watchOptions
object of type
minimist.ParsedArgs
. Positional arguments in the _
array will correspond to
Generators to run. Named arguments correspond to answers to the Generator
prompts. Generators will be run in the order they are given. Any number of
generators may be run at a given time. See watch.example.ts
for an example of
watchOptions
.
See create-pantheon-decoupled-kit for more information.
Please see the Contributing guide in our monorepo to contribute to the project.
See https://decoupledkit.pantheon.io/docs/contributing for details on contributing to this module.
FAQs
Pantheon Decoupled Kit CLI
The npm package create-pantheon-decoupled-kit receives a total of 18 weekly downloads. As such, create-pantheon-decoupled-kit popularity was classified as not popular.
We found that create-pantheon-decoupled-kit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.