
Research
/Security News
npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Command line to store environment variables in yaml file
npm i -g env2yaml
$ env2yaml [VARIABLES]
VARIABLES Comma-separated list of variables to output
-h, --help show CLI help
-o, --output=output [default: env.yaml] Output file
-v, --version show CLI version
another way of calling it is via npx. THe difference here - you can have here values from package.json. Just for example, command like
$ npx env2yaml npm_package_name,npm_package_version
creates me a file like this:
npm_package_name: env2yaml
npm_package_version: 0.0.8
then later on I can use it for example to generate other yaml files:
image:
repository: docker.com/projects/{{.Values.npm_package_name}}
tag: v{{.Values.npm_package_version}}
helm template ./chart -f env.yaml > application.yaml
FAQs
Output environment variables to yaml
The npm package env2yaml receives a total of 6 weekly downloads. As such, env2yaml popularity was classified as not popular.
We found that env2yaml demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.