
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
generator-ko-spa
Advanced tools
Quickly scaffold out webpack + KnockoutJS SPAs, complete with testing (via karma & tape)
Supports ES2015 and incremental loading ootb :collision: :tada:
Includes jquery, lodash, knockout-punches & knockout-fast-foreach by default because you probably want them.
$ npm install -g yo generator-ko-spa
...
$ mkdir my-app && cd my-app
$ yo ko-spa & yo ko-spa:view home /
$ npm run serve
[entry]
Generates the basic app structure.
When optional entry
parameter is supplied, multi entry points are enabled and
the app will be created in a subdirectory.
This can only be done the first time the app generator is ran, unless you want to go tweaking files later (which isn't difficult, but nice is avoided.)
[entry] name route
Generates a new view (component) with the given route.
If the project is using multiple entry points, entry will be required.
name
Generates a new binding.
name
Generates a new component.
name
Generates a new extender.
name
Generates a new knockout-punches filter.
name
Generates a new utility.
These are all available via npm run <cmd>
webpack
Builds the project
webpack -p
Builds the project for production
webpack --watch
Builds the project once and rebuilds on change.
Same as watch, but with -p
Serves app via webpack-dev-server (caution: webpack's docs suck. that's why this project exists.)
Same as serve, but with -p
Note: You wouldn't actually want to use this in production.
Runs the tests.
Runs the tests and generates code coverage.
FAQs
> KnockoutJS Single-Page App Yeoman Generator
We found that generator-ko-spa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.