
Security News
TypeScript is Porting Its Compiler to Go for 10x Faster Builds
TypeScript is porting its compiler to Go, delivering 10x faster builds, lower memory usage, and improved editor performance for a smoother developer experience.
electron-builder-notarize
Advanced tools
Notarize Electron applications using electron-builder
# npm
npm i electron-builder-notarize --save-dev
# yarn
yarn add electron-builder-notarize --dev
In your electron-builder config:
{
...
"afterSign": "electron-builder-notarize",
"mac": {
...
"hardenedRuntime": true,
"entitlements": "./node_modules/electron-builder-notarize/entitlements.mac.inherit.plist",
}
}
You can replace the entitlements file with your own, as long as those properties are included as well.
You will also need to authenticate yourself, either with your Apple ID or using an API key. This is done by setting the corresponding environment variables.
If for some reason the script can't locate your project's appId
, you can specify it using the APP_ID
environment variable.
APPLE_ID
: The username of your Apple developer account.APPLE_ID_PASSWORD
: An app-specific password. You can create one at appleid.apple.com.API_KEY_ID
: The ID of your App Store Connect API key, which can be generated here.API_KEY_ISSUER_ID
: The issuer ID of your API key, which can be looked up on the same site.You will also need the API key .p8
file at the correct location on your file system. See electron-notarize
's docs for details on this setup.
If your developer account is a member of multiple teams or organizations, you might see an error. In this case, you need to provide your Team Short Name as an environment variable:
export TEAM_SHORT_NAME=XXXXXXXXX
This package is inspired by this article
MIT
FAQs
Notarize Electron applications using electron-builder
The npm package electron-builder-notarize receives a total of 5,935 weekly downloads. As such, electron-builder-notarize popularity was classified as popular.
We found that electron-builder-notarize demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
TypeScript is porting its compiler to Go, delivering 10x faster builds, lower memory usage, and improved editor performance for a smoother developer experience.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.