Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
generator-one-pager
Advanced tools
A Yeoman generator for quickly scaffolding a static one page website. Useful for things like landing pages and coming soon pages.
To install and use this generator simply run npm install -g generator-one-pager
.
Running this generator is as easy as typing yo one-pager
.
It has plenty of options to get the build to your taste, but all versions use Jade as the html templating engine.
These libraries/extensions/tasks are included in every build.
The options which can be turned on or off are:
The Structure of this app is a a little opinionated to my current workflow but currently looks like this:
one-pager
|-- dist
|-- src
| |-- index.jade
| |-- images
| |-- yo.png
| |-- js
| |-- scripts.js
| |-- partials
| |-- _header.jade
| |-- scss
| |-- components
| |-- _footer.scss
| |-- _global.scss
| |-- _manifest.scss
| |-- _navbar.scss
| |-- _typography.scss
| |-- _variables.scss
| |-- pages
| |-- index
| |-- _content.scss
| |-- _manifest.scss
| |-- _manifest.scss
| |-- vendor
| |-- _manifest.scss
| |-- _normalize.scss
| |-- styles.scss
So far the only grunt command is grunt default
or simply grunt
, which builds it out then starts and connects to port :9001
then watches for changes.
Currently one-pager is set up to use the manifest pattern, where every section of the scss structure is broken up semantically and all can be imported at once by simply importing the manifest file in every directory.
This is the first generator I've built and as such mistakes are expected, any feedback would be appreciated.
FAQs
Yeoman generator
We found that generator-one-pager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.