
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
electron-installer-codesign
Advanced tools
Sign your electron apps on OSX.
# For use in npm scripts
npm i electron-installer-codesign --save-dev
# For use from cli
npm i electron-installer-codesign -g
To obtain a signing identity, join the Mac Developer Program. More info is available in the Mac Developer documentation.
Usage: electron-installer-codesign <path/to/.app> <Identity>
Sign your electron apps on OSX.
Usage:
electron-installer-codesign ./FooBar-darwin-x64/FooBar.app "Developer ID Application: Lucas Hrabovsky"
Args:
<appPath> Path to your `.app` directory.
<identity> Keychain query of a Code Signing Identity obtained from Apple.
Options:
--debug Enable debug messages.
--overwrite Overwrite any existing DMG.
-h --help Show this screen.
--version Show version.
var codesign = require('electron-installer-codesign')
codesign(opts, function done (err, filePaths) { })
Required
appPath - String
The .app directory generated by electron-packager.
identity - String
SHA-1 signature or query (e.g. Developer ID Application <your_name>) of a Code Signing Identity obtained from Apple.
err - Error
Contains errors if any.
filePaths Array
Paths successfully signed and verified.
Apache 2.0
FAQs
Sign your electron apps on OSX.
The npm package electron-installer-codesign receives a total of 3 weekly downloads. As such, electron-installer-codesign popularity was classified as not popular.
We found that electron-installer-codesign demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 30 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.