
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Also available at the Chrome Web Store.
First make sure you have a working copy of Node.js and npm (the node package manager).
To install escrito you'll need coffee.
npm install -g coffee-script
Check if everything went okay.
coffee -v
Next, run (this may take a while):
npm install -g escrito
Then start the server.
escrito
That should be enough!
You can pass custom arguments:
escrito --port 4567
Documents are not persistent by default but you can set a custom database type.
The available options are 'memory' and 'redis'. Those are the database types supported by the ShareJS project.
escrito --database redis
For more detailed help type:
escrito -h
You can also install escrito locally. This will install it in your current directory.
npm install escrito
Start the server:
npm start escrito
To pass custom arguments using npm, you have to use a slightly different syntax.
For example, to set up the server with a custom port you should do the following:
npm config set escrito:port 5000
You can clone the github repository.
git clone git://github.com/dmfrancisco/escrito.git
Install all the dependencies.
cd escrito
npm install
Run the server:
coffee web.coffee
Again, you can pass custom arguments.
coffee web.coffee --port 4567 --database redis
If you want to compile the CoffeeScripts to JavaScript.
cake build-dependencies
cake build
Run the server:
node web.js
Check them all in the humans.txt file.
FAQs
Collaborative writing with Markdown & Textile
The npm package escrito receives a total of 1 weekly downloads. As such, escrito popularity was classified as not popular.
We found that escrito demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.