Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
generator-ziom
Advanced tools
Yeoman generator for simple Angular + Bootstrap + Scss (Libsass) scaffold.
Angular + Bootstrap + Scss (Libsass) simple and custom scaffold generator.
$ npm install -g yo
To install generator-ziom from npm, run:
$ npm install -g generator-ziom
Finally, initiate the generator:
$ yo ziom
..for watching (Sass, Server on 127.0.0.1:9000 with LiveReload)
$ grunt
..for publishing project (dist directory)
$ grunt publish
..for dist directory preview (server on 127.0.0.1:9001)
$ grunt server-dist
..for validating javascript
$ grunt validate-js
..for injecting bower libraries (also in default grunt task)
$ grunt bower-install
..for compiling Sass files
$ grunt compile-sass
For LiveReload call 'grunt' (watching) command and go to http://127.0.0.1:9000
Read more about grunt-usemin
Now you can install your libraries much faster. Example:
bower search magnific-popup
...
bower install magnific-popup --save
...
grunt bower-install
This should inject the proper js and css paths into your html files. But you should be careful and check what was injected. 'grunt publish' will then minify and concatenate them into a clean files. Instead of a 'bower install' with '--save' you can manualy edit the bower.json file and then run a 'grunt bower-install'. It is also included in the default task - 'grunt'.
Yeoman has a heart of gold. He's a person with feelings and opinions, but he's very easy to work with. If you think he's too opinionated, he can be easily convinced.
If you'd like to get to know Yeoman better and meet some of his friends, Grunt and Bower, check out the complete Getting Started Guide.
MIT
FAQs
Yeoman generator for simple Angular + Bootstrap + Scss (Libsass) scaffold.
We found that generator-ziom demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.