Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
deployhelper
Advanced tools
该工具是staticdeploy的辅助工具,所以在使用时确保cli全局安装。 首先您需要了解 StaticDeploy 的使用,请点击这里
npm install --global @staticdeploy/cli
npm install --global deployhelper
cd 您的目录
npm run build
deployhelper bundle
deployhelper deploy
deployhelper publish
-- app : 应用名称,默认为项目package.json里的name
-- desc : 应用描述,默认为项目package.json里的description
-- version : 应用描述,默认为项目package.json里的version
-- from : 需要发布静态资源目录,默认为dist
--tag : 发布记录标识,默认为当前分支
--entrypoint : 对应服务器三级域名,默认值为 name-tag
--apiUrl : 发布服务器的api地址
--domain : 发布服务器的前置域名,最终apiUrl和domain进行拼接
当执行bundle时携带的参数为
--from --name --tag --description --apiUrl
当执行deploy时携带的参数为
--app --entrypoint --bundle --apiUrl
所有参数都为非必传,建议至少传entrypoint自定义三级域名
如果您有任何问题,请联系我
工具中的问题可以提issues给我: 地址
Copyright (c) 2013-present, Yuxi (Evan) You
FAQs
a tool for static Deploy tool
We found that deployhelper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.