Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Sets up a development environment for frontend developers that can't access the source code. Recently, at the last couple of places that I've been working, it's been somewhat impossible to access the source code of the working project, and therefore, I've been downloading the source via the web, working on it and then posting it back to backend developers to insert in to the project. This is somewhat annoying, so I've developed Frontfax.
frontfax new myproject
cd myproject
npm start
- myproject
- assets
- css
- images
- js
- src
- less
- static
This is the process in which frontfax handles each HTTP request:
The greatest feature of Frontfax is it's ability to target a proxy server for files that don't exist on your computer. To configure the proxy target open config/default.json
and change the proxy
option:
{
...
"proxy": "http://www.the.site.im.working.on.com"
...
}
The images, js, css URLs are can configured, but these files will always be accessed from you assets directory.
The static
directory is the last place the server looks before proxying the request. This is good for HTML files. You do not need to configure the URL for this as it will consider the root to be accessible from the static directory.
To change the URLs open the config/default.json
file and edit the [image|css|js].paths
urls.
Sometimes you may need to automatically change the content from the response. For example, you may wish to change a URL from http://assets.mysite.com
to /images
. This can be by configuring the "replacements" in the config/default.json
file. Here's that example:
{
"base": false,
"proxy": "http://www.mysite.com", // this URL will automatically get replaced with ""
"replacements": {
"http://assets.mysite.com": "/images"
}
}
As of v0.2.0, you can also use regular expressions by adding your replacements to a $RegExp
object:
{
"base": false,
"proxy": "http://www.mysite.com",
"replacements": {
"http://assets.mysite.com": "/images",
$RegExp: {
"http://s1\\.wp\\.com/\\?custom-css=(\\d+)[^\"]*": "/stylesheets/custom-$1.css"
}
}
}
The regular expression needs to be passed as a string. Hence why you see the double backquotes.
To install LESS support run the following command in your project directory frontfax add --less
.
While you're working on any less files they will automatically be converted in to css and placed in the css directory.
The advantages are of writing you CSS as LESS are:
When writing your less files, it is recommended to have one "main" file that includes all the requirements. This means that only one file needs to be uploaded to the production server after development.
Here's an example. Try to split your work in to many easy to read files.
/* assets/header.less */
.header {
.nav {
/* nav styles */
}
.logo {
/* logo styles */
}
}
/* assets/article.less */
.article {
.picture {
/* picture styles */
}
.teaser {
/* teaser styles */
}
}
/* assets/main.less */
@import 'header';
@import 'article';
Now you can point to one CSS file (/my/configured/css/path/main.css
) and have all your CSS returned:
/* build/main.css */
.header .nav {
/* nav styles */
}
.header .logo {
/* logo styles */
}
.article .picture {
/* picture styles */
}
.article .teaser {
/* teaser styles */
}
While you're working on any js files they will automatically be combined from assets/js/src/*.js into assets/js/main.js.
While working on your static files in the static
directory, you can also use a variety of templating languages.
npm i jade
.jade
) when editing your templatesnpm i coffeecup
.coffee
) when editing your templatesnpm i consolidate swig
Report all bugs in the Bitucket issue list.
FAQs
Development environment for frontend developers at Fairfax Media.
We found that frontfax demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.