Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
d3plus-dev
Advanced tools
A collection of scripts for developing D3plus modules.
If you use NPM, run npm install d3plus-dev --save
. Otherwise, download the latest release. The released bundle supports AMD, CommonJS, and vanilla environments. You can also load directly from d3plus.org:
<script src="https://d3plus.org/js/d3plus-dev.v0.6.full.min.js"></script>
This script will compile 2 builds, one with all dependencies includes (full) and one with only the core code. Next, each of those builds is minified using uglifyjs. Finally, all those builds, along with the LICENSE and README, are compressed into a .zip file.
This is a script accessible from the node environment.
Initializes the development server, which will open a connection on localhost:4000
and continuously watch the ./src
directory for file changes. When a change is detected, it will rebundle the full javascript build and refresh any open web browsers.
This is a script accessible from the node environment.
Generates the READEME.md documentation based on the JSDoc comments in the codebase. This script will overwrite README.md, but will not do any interaction with Github (commit, push, etc).
This is a script accessible from the node environment.
This is a inner method of d3plus-docs
.
This script will create all of the repository files shared across d3plus modules, including: ignore files, travis-ci configuration, LICENSE, and github templates. Additionally, this will also standardize the issue labels available on Github.
This is a script accessible from the node environment.
Parses any markdown files in the ./example
directory and transforms them into an HTML file usable on the web and takes a screenshot to be used as a thumbnail.
This is a script accessible from the node environment.
If the version number in the package.json has been bumped, this script will compile the release, publish it to NPM, update all documentation and examples, and tag and publish release notes on Github.
This is a script accessible from the node environment.
Based on the .eslintrc file provided by the d3plus-env script, all source files will be linted and then passed to any browser/unit tests that have been written.
This is a script accessible from the node environment.
FAQs
A collection of scripts for developing D3plus modules.
The npm package d3plus-dev receives a total of 13 weekly downloads. As such, d3plus-dev popularity was classified as not popular.
We found that d3plus-dev demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.