
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
dependability
Advanced tools
Dependable ordering of JS & CSS files during build and dynamically during development.
Dependable ordering of JS & CSS files during build and dynamically during development.
Given two files: main.js and component.js. If order doesn't matter, do nothing.
If you main.js needs component.js first simply add // tb_require("./component.js")
to main.js.
To generate the order of files use list:
var dependability = require('dependability');
dependability.list(__dirname + "/src", { include: 'js' }, function(error, files){
console.log("Files:", files);
});
Or to merge the files together (e.g. to write to disk) use merged:
dependability.merged(__dirname + "/src", { include: 'js' }, function(error, javascript){
fs.write(__dirname + "/build/output.js", javascript, fucntion(err){
console.log("Built.");
});
});
During development it's helpful to have the individual files in your browser's debugger.
To make this easier dependability provides loaderScript to generate a script that will load the
scripts in order.
http.createServer(function(req, res){
if(req.url == "/myjavascript") {
dependability.loaderScript(__dirname + "/src", { include: 'js', baseUrl: "/" }, function(err, output){
var out = new Buffer(output);
res.writeHead(200, {
"Content-Type": "application/javascript",
"Content-Length": out.length
});
res.end(out);
});
} else {
// deliver javascript files, e.g. using send()
}
});
dependability provides two helper functions to make using express easier.
loaderScriptExpress which uses loaderScript, and can be used like:
app.use(express.static(path.join(__dirname, 'src')));
app.get('/js/loaderScript.js', dependability.loaderScriptExpress({
base: path.join(__dirname, 'src'),
include: 'js',
baseUrl: "/"
}));
mergedExpress which uses merged, and can be used like:
app.use(express.static(path.join(__dirname, 'src')));
app.get('/js/loaderScript.js', dependability.mergedExpress({
base: path.join(__dirname, 'src'),
include: 'js'
}));
Simply use: include: 'css'. Wrap tb_require() statements in a CSS comment. Done!
By default the mode build is used. You can use the mode setting (passed in to the options
for all of dependability's functions, e.g. { mode: "test" }), to either:
// tb_only("build")
// tb_only("test")
// tb_skip("build")
Note: These are ignored if the file is tb_require()'d by another file!
relativePaths (default true). Paths given in the list and loaderScript file lists will be relative to the base path given. Can be set to false (full file system path) or another path (string) to make the paths relative to.baseUrl (default /) used only by loaderScript. Prepended to the relative path to create a full URL to the individual scripts.prefix (default tb) to use an alternative prefix (instead of tb) for tb_require, tb_skip, tb_onlyinclude (default nothing) can be either a string (e.g. js), an array (e.g. ["js", "jsc"]). Only files that match this extension will be considered when generating the list of files.FAQs
Dependable ordering of JS & CSS files during build and dynamically during development.
We found that dependability demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.