
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
my-project
, produces single sharable library named
my-project
and a single executable named MyProject
.npm install -g esy@next
git clone git@github.com:jordwalke/esy-peasy-starter.git
esy install
esy build
name
field in the package.json
and rebuild..re
file in bin/
becomes the MyProject
executable.lib/
becomes the my-project
named library..re
file can automatically see the my-project
library as the
YourProjectLib
module.my-project
library, which then allows them to see the YourProjectLib
module.Use the standard esy x any-command-here
command to run any-command-here
as
if you had installed the package. For example esy x YourPackage --args
builds
and runs your YourPackage
executable with arguments.
lib/
directory if everything fits into the single file in bin/
.bin/Index.re
file to be
bin/YourProjectNameCamelCased.re
.esy add @opam/dep-name@version
automatically builds and adds a new
dependency to package.json
.esy ls-libs
.package.json
like this: "peasyLibs": ["the-library-name"]
.esy build
.Note: After adding/building a new dependency you can use
esy ls-modules
to see which named modules become available to you by adding thepeasyLibs
entry.
npm
.Use esy
to make prebuilt binary releases of your program that can be installed
from plain npm
.
esy release bin
cd _release/bin-darwin
npm publish --tag darwin
esy-peasy
is good for rapidly making new small executables/libraries. Once they
grow, you'll want to "eject out" of esy-peasy
and begin customizing using a more
advanced build system.
FAQs
Esy-Peasy: Simple Esy Project Builder With Almost No Configuration
We found that esy-peasy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.