New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

getcdn

Package Overview
Dependencies
Maintainers
1
Versions
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

getcdn

Save the cdn file completely locally.

latest
Source
npmnpm
Version
0.0.1
Version published
Maintainers
1
Created
Source

getcdn

Save the cdn file completely locally.

why do you need it

Because the cdn may be unstable, or it needs to be deployed in an intranet environment. At this time we need to download the cdn file to the local.

Suppose you use such a cdn file:

<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.css">

Then you downloaded it directly through the browser and saved it as bootstrap.css , and then referenced the file you just downloaded in the project, which seems to be fine, but there are actually many hidden dangers:

  • When bootstrap.css runs a certain function, it needs to depend on ./bootstrap.font, because you didn't know it before, so you didn't download it, which caused an error (the related dependencies were not downloaded).
  • During use, you find a problem and need to consult the bootstrap documentation, but you don't know what version to check (some libraries do not mark their own version number in the file).
  • When you need to switch back to the third-party CDN again, you will find how happy it is if you only need to change one origin (full mirror URL).
  • the url you want to trace to its github, its other versions, and more information about it...

how to use

Command Line:

# install
npm i -g getcdn

# help
getcdn .help

# download the latest version
getcdn jsonkey

# Specify the storage directory
getcdn .dir=mycdn jsonkey

# Download the specified version
getcdn jsonkey@0.0.2

# Specify namespace and version
getcdn @wll8/express-ws@1.0.3

License

MIT

Copyright (c) 2017-present, xw

FAQs

Package last updated on 01 Dec 2022

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts