Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
FooDoc is a Bootstrap based template for JSDoc3. A big thanks to DocStrap as it served as the inspiration for this project.
This project began as a simple modification of DocStrap to get things looking closer to the actual Bootstrap 3 documentation and it ended up being a re-write, even switching out the template engine to Handlebars. The reason I switched the template engine away from Underscore templates was that as I refactored the publish.js
and figured out the logical flow of the code I realized I could move all the post processing done in the templates into local modules that the publish.js
makes use of. This has helped group similar code blocks together making it easier to maintain and it has kept the Handlebars templates as lean and logicless as possible.
The original lunr search implementation in DocStrap performs all the indexing in the browser using a hidden iframe, this was done to allow the search to work offline when viewing the documentation via the file:// protocol. While this works it seemed a better idea to just generate the search index and store as part of the documentation process and output the results in two files lunr-data.json
and lunr-data.js
that are then consumed by the search component when required. This also allowed for a more finely tuned implementation resulting in more accurate search results. Members, methods and type definitions of container objects (classes, namespaces, modules, etc.) are automatically added to the index so now when performing searches these symbols appear in the search results and clicking on one will take you directly to its documentation.
stylesheets
and scripts
options.@summary
tag where appropriate, this tag now also supports markdown syntax.As this started off as a DocStrap modification I've used it's fixtures
code to generate the sample documentation so you can compare the differences between the two. You can see an example of the documentation generated using this template at the below link:
inlineNav
option set to true
systemLogo
and systemColor
optionscollapseSymbols
option set to false
If you manage your own version of jsdoc:
npm install foodoc
When using grunt, please look at grunt-jsdoc which you can use with FooDoc.
jsdoc -c path/to/conf.json -t ./node_modules/foodoc/template -R README.md -r .
The -c
sets the config, the options you can supply in the templates object are listed below in the options.
The -t
sets the template. This is the option you need to set to get the FooDoc template to be used.
The -R
sets a markdown file to be the front page of the documentation.
The -r
tells jsdoc to run recursively.
The .
says from current directory.
FooDoc ships with a conf.json
file in the template/ directory. It is just a regular old JSDoc configuration file, but with the following new options:
"templates": {
"systemName" : "{string}",
"systemSummary" : "{string}",
"systemLogo" : "{string}",
"systemColor" : "{string}",
"footer" : "{string}",
"copyright" : "{string}",
"includeDate" : "{boolean}",
"dateFormat" : "{string}",
"inlineNav" : "{boolean}",
"inverseNav" : "{boolean}",
"navMembers" : "{array.<object>}",
"linenums" : "{boolean}",
"showTableOfContents" : "{boolean}",
"analytics" : "{object}",
"collapseSymbols" : "{boolean}",
"methodHeadingReturns" : "{boolean}",
"outputSourceFiles" : "{boolean}",
"outputSourcePath" : "{boolean}",
"sort" : "{boolean|string}",
"search" : "{boolean}",
"stylesheets" : "{array.<string>}",
"scripts" : "{array.<string>}"
}
"FooDoc"
)
The name of the system being documented. This value is used to generate the home link in the navbar and the page title for the generated README page."A Bootstrap and Handlebars based JSDoc3 template."
)
The short summary description of the system being documented. This is used as part of the page title for the generated README page.""
)
A small 40x40 pixel image to used in the navbar along with the systemName
to create the home link.""
)
The primary color used to generate the documentation. This changes the background color of the jumbotron-esque headers on every page, the primary callout border and header colors, the TOC link colors and various other small highlights.""
)
Additional content to place in the footer element of each page before the copyright
and default generated by messages. This can contain HTML."FooDoc Copyright © 2016 The contributors to the JSDoc3 and FooDoc projects."
)
A copyright message to display in the footer of each page throughout the documentation.true
)
Whether or not the date is included as part of the generated by message.Do MMM YYYY
)
If includeDate
is true this is the format used to display the date. This makes use of moment.js so any format it supports should be supported here.false
)
If your system is quite large the navbar drop downs just don't look good, setting this option to true changes these drop downs to instead just be a link to a list page.true
)
Bootstrap navbars support an inverse mode, this toggles that option for the documentation navbar with true
being the dark version.[ see below ]
)
This option allows you to specify which kinds of documents appear in the navbar, give them a title and provide a short summary which is then used as part of the inlineNav
option to generate the list pages.
The following shows the default values for this option, you can remove from this array but cannot add new kinds without altering the template. If no documents are registered for a specific kind it is not added to the navbar.[
{"kind": "class", "title": "Classes", "summary": "All documented classes."},
{"kind": "external", "title": "Externals", "summary": "All documented external members."},
{"kind": "global", "title": "Globals", "summary": "All documented globals."},
{"kind": "mixin", "title": "Mixins", "summary": "All documented mixins."},
{"kind": "interface", "title": "Interfaces", "summary": "All documented interfaces."},
{"kind": "module", "title": "Modules", "summary": "All documented modules."},
{"kind": "namespace", "title": "Namespaces", "summary": "All documented namespaces."},
{"kind": "tutorial", "title": "Tutorials", "summary": "All available tutorials."}
]
true
)
Whether or not to output pretty printed source file documentation that is linked to from other documents.true
)
When outputSourceFiles
is false
, you may still want to name the file even without a link to the pretty printed output. Set this to true
when outputSourceFiles
is false
. outputSourceFiles
when true
takes precedence over this setting.true
)
When true
, line numbers will appear in any pretty printed source code blocks. If outputSourceFiles
is true
this will add an additional link to all documented members pointing to the exact line number in the pretty printed source file the documentation was pulled from.true
)
When true
, a TOC is generated from all H1
, H2
, H3
and H4
headings in the generated pages, this includes the README and tutorial pages. If you want to disable this for specific tutorial pages you can set this same option per tutorial in the extended tutorial configuration.null
)
Add a Google Analytics code to the template output
e.g. "analytics":{"ua":"UA-XXXXX-XXX", "domain":"XXXX"}
true
)
When true
, symbols in generated pages (methods, members, type definitions, etc.) are collapsed so only there title and summary are visible. You can then click on them to reveal more detailed information.true
)
When true
, method headings will contain the return type if one exists."linenum, longname, version, since"
)
Specifies the sort order of the symbols on a page. They will still be grouped under there own headings (Classes, Members, Methods, etc.) but within these groups they are sorted using the supplied value. By default this sorts symbols first by where they were found in the original source code, then by there longname, then by there version and lastly by there since tag.true
)
Whether or not to enable the lunr search component.[]
)
An array of stylesheet urls to include in every page.[]
)
An array of script urls to include in every page.FAQs
A Bootstrap and Handlebars based JSDoc3 template.
The npm package foodoc receives a total of 9,311 weekly downloads. As such, foodoc popularity was classified as popular.
We found that foodoc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.