Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
express-compiless
Advanced tools
Express middleware that compiles less files to css on the way out.
Middleware that compiles less to css on-the-fly. Intended to be used
in a development setting with the express.static
middleware, but
should work with any middleware further down the stack, even an http
proxy.
The response will be rewritten under these circumstances:
Content-Type
of text/less
..less
(excluding GET parameters) and
the Content-Type
is application/octet-stream
(this is what
Connect's static
middleware does.Compiless plays nice with conditional GET. If the original response
has an ETag, compiless will add to it so the ETag of the compiled
response never clashes with the original ETag. That prevents the
middleware issuing the original response from being confused into
sending a false positive 304 Not Modified
if compiless is turned
off or removed from the stack later.
Make sure you have node.js and npm installed, then run:
npm install express-compiless
var express = require('express'),
compiless = require('express-compiless'),
root = '/path/to/my/static/files';
express()
.use(compiless({ root: root }))
.use(express.static(root))
.listen(1337);
3-clause BSD license -- see the LICENSE
file for details.
v5.0.0 (2020-11-22)
FAQs
Express middleware that compiles less files to css on the way out.
The npm package express-compiless receives a total of 1,230 weekly downloads. As such, express-compiless popularity was classified as popular.
We found that express-compiless demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.