
Security News
Feross on Risky Business Weekly Podcast: npm’s Ongoing Supply Chain Attacks
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
generator-babel-make
Advanced tools
Creates a project setup to do babel compilation, browserify/uglify, mocha testing, istanbul code coverage, and use make as a build tool
#Description A yeoman generator to get a node/browser js project started. Utilizes make as a task runner, babel as a transpiler, browserify and uglify to bundle and minify, mocha to test, and istanbul to calculate code coverage
This template is configured to find tests in directories named __tests__
nested inside the src directory. Tests can also be written in es6, and coverage reports will reflect the original es6 code.
#Builtin make targets
The default make target will run tests, then build browserified bundles in dist
The other useful targets are seperated into categories.
##For Building
##For testing
##For cleaning
lib
directory__tests__compiled__
directorydist
directorycoverage
directory#Reserved Directories
The make built targets utilize the directories: lib
, dist
, and coverage
at the top level. Also during the coverage step, tests are compiled into __tests__compiled__
directories.
FAQs
Creates a project setup to do babel compilation, browserify/uglify, mocha testing, istanbul code coverage, and use make as a build tool
We found that generator-babel-make demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.