
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
formidable-landers
Advanced tools
Welcome to the HQ of maintaining our visible Formidable projects!
We use yarn
, so make sure to have a current version installed, then install
this project.
$ npm install -g yarn
$ yarn install
Demo the header and footer components by running:
$ yarn demo
and visit http://localhost:5678/.
The usual:
$ yarn run lint
$ yarn run test
# ... or all together ...
$ yarn run check
Before publishing, if you want to test the changes you’ve made to
formidable-landers
, you can build what you have and use npm link
in the repo
where you want to see teh changes.
In formidable-landers
, run:
$ yarn build
then run:
$ npm link
Then, in a repo you want to test, such as formidable.com
, run:
$ npm link formidable-landers
and you should see your changes! 🎉
If npm link
is being futzy or giving you problems, take a look at
lank
which requires a bit more
learning curve and setup, but produces a far more manageable and reliable
way of working with multiple dependent repos at the same time.
When publishing, please make sure to install and use npm@5.6.0
to preserve
file timestamp metadata as it is required for our overall website build and
versions subsequent to 5.6.0
intentionally destroy this metadata:
$ npm install -g npm@5.6.0
$ npm --version
5.6.0
master
.$ npm version major|minor|patch -m "Version %s - INSERT_REASONS"
$ npm publish
$ git push && git push --tags
FAQs
Reusable components for Formidable's marketing sites
The npm package formidable-landers receives a total of 74 weekly downloads. As such, formidable-landers popularity was classified as not popular.
We found that formidable-landers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 31 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.