
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
crx is a node.js command line app for packing Google Chrome extensions.
$ npm install crx
Pack the specified directory into a .crx package, and output it to stdout. If no directory is specified, the current working directory is used.
Use the -f
option to output to a file instead of stdout; if no file is specified, the package is given the same name as the directory basename.
Use the -p
option to specify an external private key. If this is not used, key.pem
is used from within the directory. If this option is not used and no key.pem
file exists, one will be generated automatically.
Generate a 1,024-bit RSA private key within the directory. This is called automatically if a key is not specified, and key.pem
does not exist.
Show information about using this utility, generated by commander.
Given the following directory structure:
└─┬ myFirstExtension
├── manifest.json
└── icon.png
run this:
cd myFirstExtension
crx pack -f
to generate this:
├─┬ myFirstExtension
│ ├── manifest.json
│ ├── icon.png
│ └── key.pem
└── myFirstExtension.crx
You can also name the output file like this:
cd myFirstExtension
crx pack -f myFirstExtension.crx
to get the same results, or also pipe to the file manually like this.
cd myFirstExtension
crx pack > ../myFirstExtension.crx
As you can see a key is generated for you at key.pem
if none exists. You can also specify an external key. So if you have this:
├─┬ myFirstExtension
│ ├── manifest.json
│ └── icon.png
└── myPrivateKey.pem
you can run this:
crx pack myFirstExtension -p myPrivateKey.pem -f
to sign your package without keeping the key in the directory.
Copyright (c) 2011 Jed Schmidt. See LICENSE.txt for details.
Send any questions or comments here.
FAQs
crx is a utility to package Google Chrome extensions via a Node API and the command line
The npm package crx receives a total of 17,028 weekly downloads. As such, crx popularity was classified as popular.
We found that crx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.