
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
github-pages-plugin-for-type-route
Advanced tools
Feature create-react-app/type-route/gh-pages compatibility
This is a build tool to enable create-react-app's sites that uses type-route to be deployed on gh-pages.
Github pages has no configuration to enable single pages application.
If you GET https://my-domain.com/a/b/foo github page will serve a/b/foo.html when in reality we would like that, regardless of the url path, it's always the index.html that is served.
The workaround is to copy the content of index.html into a 404.html file, it works but it's very bad for SEO.
Copying the index.html everywhere there is a path before deploying.



WARNING: In the
router.tsfile you can only perform relative import, import using based on thebaseUrloption of thetsconfig.jsonfile are not supported.
Then when we run yarn build and this will get generated for us:

All this files are copies of index.html generated by the tool:
[
"auteur.html",
"evenements.html",
"naturalisme.html",
"naturalisme/antilles.html",
"naturalisme/france.html",
"naturalisme/ouset-canadiens.html",
"naturalisme/reunion.html",
"portrait.html",
"404.html"
]
result: No more 404 🥳

This is a project that uses this module: https://github.com/thieryw/theo-tz
It's online here: http://thieryw.github.io/theo-tz
FAQs
Feature create-react-app/type-route/gh-pages compatibility
The npm package github-pages-plugin-for-type-route receives a total of 22 weekly downloads. As such, github-pages-plugin-for-type-route popularity was classified as not popular.
We found that github-pages-plugin-for-type-route demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.