Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
generator-jkv2
Advanced tools
Opinionated Yeoman generator for full-stack mono-repo TypeScript projects.
Opinionated generator for mono-repo web apps.
Features:
npm i -g npm@7 yo generator-jkv2
yo jkv2
yo jkv2:model
# Create a new TypeORM model and CRUD for it
yo jkv2:api
# Create a new API endpoint for a model
npm run db:init:local
# Re-creates local DB, migrates and seeds it
npm run db:migrate:generate -n $name
# Create a new migrations
npm run sls:deploy:dev
# Deploy to the dev environment
Currently VPC connection is recommended.
It offers DB driver that doesn’t have problems with types unlike the one used by Aurora Data API. However using it is a bit more pricy and there are problems with Lambda timeouts after hitting 10 requests per second on a Lambda. Once the Data API is somewhat more mature we should consider switching to it.
lambda-middleware and class-validator packages are used for incoming request body validation.
Currently when serializing responses there’s no option to exclude unwanted fields.
In your .env.local
or in your env variables config on e.g. Netlify you'll have to assign the following env variables:
REACT_APP_COGNITO_IDENTITY_POOL_ID,
REACT_APP_COGNITO_REGION,
REACT_APP_COGNITO_IDENTITY_POOL_REGION,
REACT_APP_COGNITO_USER_POOL_ID,
REACT_APP_COGNITO_USER_POOL_APP_CLIENT_ID,
REACT_APP_API_REGION
To find some of the values you should login to your aws account
REACT_APP_COGNITO_USER_POOL_ID
REACT_APP_COGNITO_USER_POOL_APP_CLIENT_ID
REACT_APP_IDENTITY_POOL_ID
FAQs
Opinionated Yeoman generator for full-stack mono-repo TypeScript projects.
The npm package generator-jkv2 receives a total of 0 weekly downloads. As such, generator-jkv2 popularity was classified as not popular.
We found that generator-jkv2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.