
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
ember-cli-codemirror-shim
Advanced tools
ES6 accessible module for importing codemirror from npm.
# From the command line:
ember install ember-cli-codemirror-shim
Create a codemirror configuration object in your ember-cli-build.js file to specify what codemirror assets you would like to include in your project:
var EmberAddon = require('ember-cli/lib/broccoli/ember-addon');
module.exports = function(defaults) {
var app = new EmberAddon(defaults, {
codemirror: {
addons: ['mode/simple.js', 'mode/multiplex.js', 'comment/comment.js'],
modes: ['xml', 'javascript', 'handlebars', 'htmlmixed', 'css'],
themes: ['panda-syntax'],
keymaps: ['sublime']
}
});
return app.toTree();
};
IMPORTANT: The CodeMirror source repository keymaps, modes and theme files follow a consistent structure, so you only need to pass the name for each of these configs. The CodeMirror addons are organized differently and do not have a uniform file structure. Because of this you have to pass in the file path to the addon you would like to import relative to the CodeMirror addons directory: CodeMirror Github Addons Dir.
Eg, to import the markdown fold addon, you would pass:
codemirror: {
addons: ['fold/markdown-fold.js']
}
The CodeMirror Manual has details on modes, themes, keymaps, etc.
// Some Awesome Component
import Ember from 'ember';
import CodeMirror from 'codemirror';
// Do amazing things!
BIG THANK YOU TO:
This shim wouldn't be possible without the work they have done.
FAQs
The default blueprint for ember-cli addons.
We found that ember-cli-codemirror-shim demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.