Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
#Envoy Fast, simple deployment of static sites.
##Goals
##Supported Services
##High-Level Calls
var envoy=require('envoy')
, ftpOptions = {
username: 'Fluffy'
, password: 'McChubbers'
, host: 'ftp.cheeseburger.com'
}
, simpleWebsite = {
"index.html": '<h1>Welcome, Humans!</h1>'
}
, afterDeploy = function (err, log) {
if(err) {
console.err("Uh-oh: " + err);
}
else {
console.log("Website Deployed!");
console.log("Deployment log:");
for(var i=0, ii=log.length; i<ii; i++) {
console.log(log[i]);
}
}
};
// Deploying a local folder to FTP
envoy.deployFolder('./my-website-folder', 'ftp', ftpOptions, afterDeploy);
// Deploying a collection of files to FTP
envoy.deployCollection(simpleWebsite, 'ftp', ftpOptions, afterDeploy);
##Low-Level Calls
You can perform lower level calls with the adapters directly.
var client = new require('./lib/adapters/ftp')
, opts = {username:'donkey', password:'kong'};
client.before(opts, function (err) {
client.put('some_file.txt', new Buffer('Some Data'), function (err) {
client.after( function (err) {
console.log("Done!");
} );
});
});
All adapters support three operations
Certain adapters like FTP will support more operations unique to their operation
Take a look at the tests for more.
##Notes
.envoy
file in the remote directory to speed up future deploys. Make sure your FTP server is configured to show dotfiles.##Testing
You'll need a tests/secrets.json
file to run the tests with jake test
. See tests/secrets.example.json
for an example secrets.json
file. To test integration with different backends, you can have multiple secret files, name them secrets.somestring.json
and run the tests with jake testWith[somestring]
.
FAQs
Better Deployment with Node.js
The npm package envoy receives a total of 1 weekly downloads. As such, envoy popularity was classified as not popular.
We found that envoy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.