Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
ghost-upload-theme
Advanced tools
Using TryGhost/Ghost and customizing some themes for your website?
If you'd like to automate the upload of the new or updated theme as part of a CI task for example, this package is what you're looking for.
yarn global add ghost-upload-theme
ghost-upload-theme
--environment-path ./path/to/your/env/.env
--theme-path ./path/to/your/theme.zip --activate-theme
--routes-path ./path/to/your/routes.yaml
--content-path ./path/to/your/exported/content*.json
--init # use this if the ghost install is completely fresh, no users created
--allow-preconfigured-setup # if setup already completed, allow the setup to fail (false by default)
Environment variables will be read from actual env vars, .env
, or a dotenv
file passed in as --environment-path ./path/to/your/env/.env
Configurable environment variables are:
Var | e.g. | Description |
---|---|---|
GHOST_URL | http://localhost:3001 | The url of the ghost instance that you're targeting (could be production or localhost) |
GHOST_ADMIN_EMAIL | j.bloggs@example.com | Email of the admin user |
GHOST_ADMIN_PASSWORD | hunter123456789 | Their password - if you're running --init , note this has to be >10 chars |
GHOST_API_FETCH_TIMEOUT_MS | 10000 | Max time the api calls will wait for ghost to respond. Note in CI systems this can be quite a long time - 60000 is suggested |
Watch mode and display dev outputs:
yarn run start
DEBUG=* node dist/ghost-upload-theme.umd.js --theme-path /your/theme.zip
FAQs
Easily upload a theme to https://ghost.org
The npm package ghost-upload-theme receives a total of 0 weekly downloads. As such, ghost-upload-theme popularity was classified as not popular.
We found that ghost-upload-theme demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.