
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
dce-paella-extensions
Advanced tools
This module contains Harvard DCE-specific extensions to the Paella video player.
It is not a standard Node or browser module (as of now), but rather, a way to package extensions for the build process so that we can avoid forking Paella and maintaining that fork.
When using as a dependency in another project:
npm install dce-paella-extensions
When working on this module:
git clone git@github.com:harvard-dce/dce-paella-extensions
git checkout <branch name>
npm install
You need to copy your stuff out of this module to where you need it yourself.
For example, HUDCE registers this repo as a dependency of a project that also depends on Paella and Opencast and uses a gulpfile to copy the files to where they need to go.
...
var s1 = gulp.src(config.dceExtPath + '/vendor/plugins/**').pipe(gulp.dest(config.buildPath + '/paella/plugins'));
var s2 = gulp.src(config.dceExtPath + '/vendor/skins/**').pipe(gulp.dest(config.buildPath + '/paella/vendor/skins'));
var s3 = gulp.src(config.dceExtPath + '/resources/images/paella_icons_light_dce.png').pipe(gulp.dest(config.buildPath + '/paella/resources/images'));
var s4 = gulp.src(config.dceExtPath + '/resources/style/overrides.less').pipe(gulp.dest(config.buildPath + '/paella/resources/style'));
...
var s1 = gulp.src(config.dceExtPath + '/config/config.json').pipe(gulp.dest(config.buildPath + '/paella-opencast/config'));
var s2 = gulp.src(config.dceExtPath + '/config/profiles/profiles.json').pipe(gulp.dest(config.buildPath + '/paella-opencast/config/profiles'));
...
Local development
Testing a development version of this module in hudce-opencast
To avoid having to run npm publish
and npm install
just to see if a change worked in the context of paella-matterhorn, you can:
npm link
(with sudo if your global node_modules is in a place that requires it) from this repo's directory.npm link dce-paella-extensions
in the hudce-opencast enage-player-paella module. Now there will be a symlink-like link to the project.gulp build
in the hudce-opencast enage-player-paella module.There is only one set of tests so far. To run it, assuming you have already run npm install
:
make test
You should see output that looks like this:
TAP version 13
# Heartbeat test
ok 1 Passes a function to the timer.
ok 2 Sets the timer to run at the interval specified in the config.
ok 3 The heartbeat event is registered.
ok 4 Sets the timer to repeat.
1..4
# tests 4
# pass 4
# ok
Any change you make a PR for should end in a test run with 'ok'; no failures.
FAQs
Harvard DCE Extensions for the Paella video player
The npm package dce-paella-extensions receives a total of 111 weekly downloads. As such, dce-paella-extensions popularity was classified as not popular.
We found that dce-paella-extensions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.