
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
generator-django-rest
Advanced tools
A Yeoman generator for a Django REST API that makes you efficient, includes features you need in a typical modern web app, yet keeps things simple.
A Yeoman generator for a Django REST API (and optionally a React SPA) that makes you efficient, includes features you need in a typical modern web app, yet keeps things simple.
Note: the project is still considered to be in beta until I get a chance to test it on more apps. That said, I am using it in my own projects :)
The philosophy is to include features useful across projects that are tedious to set up from scratch. Some of the cool features are:
🚀 quick to launch – start a new project and deploy it to Heroku in 3 commands:
yo django-rest
./scripts/setup.sh
./scripts/deploy.sh
⚡️ productive – start the Django, DB & optionally frontend dev servers easily
./scripts/dev.sh
📜 sane logging – defaults to fail nicely
🦄 modern JS – serve static files on / using django-spa & Whitenoise for nice single-page apps using React / Angular / Vue…
⛵️ monorepo - option to automatically set up a create-react-app frontend for you in the same git repo with everything integrated under the mantra one app, one repo, one dyno
📦 Heroku-friendly packaging – if you're using the built-in React frontend,
deploy.sh
minifies the frontend and packages it up with Django
into a separate prod branch ready for deployment as a Django web app
(that gets deployed to Heroku by default)
🤓 12-factor config – environment variable configuration
REDIS_URL=redis://localhost:6379/0
CELERY_RESULT_BACKEND = env('REDIS_URL')
🔋 batteries included
🐶 familiar – check out the rough
project file layout,
it's much like django-admin startproject myproject
would set it up
(only repeats the project name twice,
i.e. ~/code/myproject/myproject/settigns.py)
🚢 Docker support – docker-compose up
to get a working environment with a database
⚛️ GraphQL – interactive API with filtering and nested queries
See CHANGELOG.md for a full release history with all the features.
To begin, you need to install node.js. Once you have that, you need Yeoman pre-installed. Yeoman lives in the npm package repository. You only have to ask for him once, then he packs up and moves into your hard drive.
npm install -g yo
Then, we need the django-rest generator, i.e. plug-in. You install generator-django-rest from npm.
npm install -g generator-django-rest
Finally, for every new project you would initiate the generator in an empty folder.
mkdir myproject
cd myproject
yo django-rest
Now check HACKING.md for extra instructions.
FAQs
A Yeoman generator for a Django REST API that makes you efficient, includes features you need in a typical modern web app, yet keeps things simple.
The npm package generator-django-rest receives a total of 0 weekly downloads. As such, generator-django-rest popularity was classified as not popular.
We found that generator-django-rest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.