Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Generated static project documentation primarily for node.js projects. A fork of Docco-husky modified to use marked instead of showdown and prettyprint instead of pygments
This is a fork of docco-husky
. The main differences are that this is using prettify to
do the syntax highlighting and also the cloc/perl
part is removed you can get a better report of lines of code and
code complexity with grunt-plato.
Also I aim to rewrite this back in javascript... Just for fun (And because nowadays "you might not need coffeescript")
A streamlined static site generator for project documentation based on Docco. "Husky" because it's bigger and more irregular than Docco, like Husky Jeans you would buy at Sears back in the day.
A fork of Docco, intended to go beyond the appropriate scope of Docco itself. Forked because Docco itself is pretty simple and this is intended to diverge. The initial fork included merged pull requests from nevir and jswartwood for their work on supporting recursive directories and an improved "Jump To" menu.
Check out the generated documentation for this project.
Or these other samples
To install via npm into your project:
npm install docco-husky-plus
Install globally:
[sudo] npm install -g docco-husky-plus
Or include as a dependency in your package.json
docco-husky will generate docs in a ./docs directory. It accepts multiple files (including wildcards) and directories for it to recurse.
docco-husky -name "<optional project name>" <list of files>
Optional configuration in your package.json. The project name can alternatively be passed in the package.json configuration and it will override the value passed in the -name
option.
"docco_husky": {
"css": "path/to/alternative/css/file.css"
"output_dir": "docs/out", // default "docs"
"content_dir": "docs/my_markdown_files", // default null
"project_name": "Your Project name",
"show_timestamp": true // default true
}
# from a local install
./node_modules/.bin/docco-husky app.js lib public
# with a project name
./node_modules/.bin/docco-husky -name "My Project" app.js lib public
# with wildcards
./node_modules/.bin/docco-husky -name "My Project" *.js lib public
# with global install
docco-husky -name "My Project" *.js lib public
docco-husky
can also include other markdown content from your project. It expects the markdown files to be in a specified directory configured with content_dir
. It walks the directory recursively and puts the resulting files in your the output_dir
root including a relative subdirectory.
You can manually link to these files from your README.md or optionally if there is a content_index.md
file in your content_dir
directory, this will be injected into the package.json section of the main page just below the module name and description in index.html
. This is a convenient way to reference any additional documents in your index.html
that you don't want in your README.md file. One reason you may not want links in your README.md file is that these relative links will not resolve when Github renders your project's README.md file.
docco-husky will write generated files to ./docs by default or to the directory specified in the package.json config as output_dir
For all source files, the output will be like
. (e.g. foo.js) --> .html (e.g. foo.html).An index.html will be generated and will include a formatted version of a README.md if your project includes it, some details from the a package.json file, and project stats generated by cloc.
Single line comments will only be parsed with the exception os Javascript (as of 0.2.0) which is in an early experimental state.
FAQs
Generated static project documentation primarily for node.js projects. A fork of Docco-husky modified to use marked instead of showdown and prettyprint instead of pygments
The npm package docco-ng receives a total of 2 weekly downloads. As such, docco-ng popularity was classified as not popular.
We found that docco-ng demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.