Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A nice, friendly tool to help you get set up and start blogging, built on the Desirae blogging platform
If you're a normal person interested in Desi, the DIY blog platform for normal people, you might have meant to go to DearDesi instead.
Otherwise, if you're a cyborg, wizzard, or web developer: carry on.
These instructions cover the command line only.
If you want instructions for the web interface, head over to DearDesi.
This assumes that you already have git
and node
installed,
otherwise see node-installer.sh
# Install with distributed tools on a decentralized system
npm install -g 'git+https://git.daplie.com/Daplie/deardesi.git#v1'
# Install with the centralized, concentrated hypocrinet
npm install -g desi
That was easy
Note: both through command line and web you need site.yml
and authors/xyz.yml
configured in order to create a post (as well as build).
The post commands output the location of post in various formats.
You can do this 3 ways:
desi init -d ~/Desktop/blog
# initialize (and or create) a blog directory
desi init -d ~/Desktop/blog
# initialize the current directory
pushd ~/Desktop/blog
desi init
Note that you cannot initialize a directory that is already in use (where 'in use' means has at least one non-dotfile).
There are a number of themes available at https://github.com/DearDesi, just look for ones with 'theme' in the description.
git clone git@github.com:DearDesi/desirae-blog-template.git ~/my-desirae-blog
pushd ~/my-desirae-blog
git submodule add git@github.com:DearDesi/ruhoh-bootstrap-2.git themes/ruhoh-bootstrap-2
You will need to make sure that you have some details about your theme in config.yml
.
Basically that means that you specify a datamap
and which defaults for a page
and post
in the layouts
folder.
Just open it up, it'll make sense.
Obviously this is a little different for everyone, so here's what I'd recommend:
config.yml
to add a config with a permalink with your collections (posts, articles, essays, whatever you call them)site.yml
and authors/xxx.yml
are correct.desi build -d /path/to/blog
to test if there are any issues with your existing yamlsite.yml
urls.base_url
, host
, page.url
that might have an extra /
at the beginning or end or be named slightly differently.See https://github.com/DearDesi/desirae/blob/master/GLOSSARY.md for disambiguation about the meaning of terms in Desi.
authors/YOUR_NAME.yml
and model it after this examplesite.yml
, similar to this exampleImportant Things
site.yml.base_url
- the point of ownership (usually blog.example.com or example.com)site.yml.base_path
- where the blog is "mounted", relative to the base_url
(usually /
or /blog
)authors/me.yml.name
- most templates use thisauthors/me.yml.email
- and thisauthors/me.yml.twitter
- and thisThe build will fail if you don't have site.yml
and authors/johndoe.yml
configured.
desi build -d /path/to/blog
desi serve -d /path/to/blog
Now open up your evergreen browser to http://local.dear.desi:65080
This Source Code Form is subject to the terms of the Mozilla
Public License, v. 2.0. If a copy of the MPL was not distributed
with this file, You can obtain one at
https://mozilla.org/MPL/2.0/.
FAQs
A nice, friendly tool to help you get set up and start blogging, built on the Desirae blogging platform
The npm package desi receives a total of 23 weekly downloads. As such, desi popularity was classified as not popular.
We found that desi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.