Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
generator-skygear
Advanced tools
Skygear is a cloud backend for apps. It comes with SDKs for iOS, Android and Web.
This is a yeoman generator for a React-Skygear app. It extends generator-react-webpack.
What's in the app:
Follow the steps below to create a React-Skygear app:
# Make sure both is installed globally
npm install -g yo
npm install -g generator-skygear
# Create a new directory, and `cd` into it:
mkdir my-new-project && cd my-new-project
# Run the generator
yo skygear
You will be asked to input the server endpoint and the api key of your app. You can get them from the developer portal after creating an account at Skygeario.
npm start
If you can see the following screen, it means you have set up the app successfully. :smile:
The following commands are available for your project:
# Start for development
npm start # or
npm run serve
# Start the dev-server with the dist version
npm run serve:dist
# Just build the dist version and copy static files
npm run dist
# Run unit tests
npm test
# Auto-run unit tests on file changes
npm run test:watch
# Lint all files in src (also automatically done AFTER tests are run)
npm run lint
# Clean up the dist directory
npm run clean
# Just copy the static assets
npm run copy
For more advance usage and option detail, please refer to [README.md of generator-react-webpack] (https://github.com/react-webpack-generators/generator-react-webpack)
As a next step you can check out the guides for Skygear cloud database basics and Skygear user authentication basics.
FAQs
Scaffolding for Skygear JS App
The npm package generator-skygear receives a total of 0 weekly downloads. As such, generator-skygear popularity was classified as not popular.
We found that generator-skygear demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.