Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
#Envoy Fast, simple deployment of static sites.
##Goals
##Supported Services
##High-Level Calls
var envoy=require('envoy')
, ftpOptions = {
username: 'Fluffy'
, password: 'McChubbers'
, host: 'ftp.cheeseburger.com'
}
, s3Options = {
"bucket": "<BUCKET NAME>"
, "key": "<AWS ACCESS KEY>"
, "secret": "<AWS SECRET KEY>"
, "region": "<AWS REGION>" //us-west-1
}
, simpleWebsite = {
"index.html": '<h1>Welcome, Humans!</h1>'
}
, afterDeploy = function (err, log) {
if(err) {
console.err("Uh-oh: " + err);
}
else {
console.log("Website Deployed!");
console.log("Deployment log:");
for(var i=0, ii=log.length; i<ii; i++) {
console.log(log[i]);
}
}
};
// Deploying a local folder to S3
envoy.deployFolder('./my-website-folder', 's3', s3Options, afterDeploy);
// Deploying a collection of files to FTP
envoy.deployCollection(simpleWebsite, 'ftp', ftpOptions, afterDeploy);
##Low-Level Calls
You can perform lower level calls with the adapters directly.
var client = new require('./lib/adapters/ftp')
, opts = {username:'donkey', password:'kong'};
client.before(opts, function (err) {
client.put('some_file.txt', new Buffer('Some Data'), function (err) {
client.after( function (err) {
console.log("Done!");
} );
});
});
All adapters support three operations
Certain adapters like FTP will support more operations unique to their operation
Take a look at the tests for more.
##Notes
.envoy
file in the remote directory to speed up future deploys. Make sure your FTP server is configured to show dotfiles.##Testing
You'll need a tests/secrets.json
file to run the tests with jake test
. See tests/secrets.example.json
for an example secrets.json
file. To test integration with different backends, you can have multiple secret files, name them secrets.somestring.json
and run the tests with jake testWith[somestring]
.
x-amz-acl = public-read
on uploaded objectsFAQs
Better Deployment with Node.js
The npm package envoy receives a total of 6 weekly downloads. As such, envoy popularity was classified as not popular.
We found that envoy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.