Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
grunt-deploy-to-env
Advanced tools
Automated application modification and deployment for multiple environments.
Allows you to configure and deploy a project to multiple environments. grunt-deploy-to-env takes a folder of files, replaces some of the file contents (e.g. local.com => example.com) then deploys the changed files to a specific location, all without changing the original files. This makes it possible to have one common project and deploy it to multiple environments.
grunt.config(['deploy'], {
live: {
server: '/Volumes/mounts/live_environment',
source: '/Users/foo/Desktop/my_project',
path: '/project-namespace',
replacements: [
{
from: 'http://127.0.0.1:8000',
to: 'http://example.com'
},
{
from: 'Local',
to: 'Live'
}
],
beforeDeployment: function () {
// perform some checks before allowing deployment
}
}
});
With this example, when you run grunt live
you would:
beforeDeployment
function/Users/foo/Desktop/my_project
/Volumes/mounts/live_environment/project-namespace/my_project
, creating the project-namespace
directory if necessary, or overwriting the previous contents if they already existed.Absolute path to the location of your server mount.
Absolute path to the local project.
Relative path to append to the server path. This allows you to deploy to example.com/something, rather than just the root of example.com.
Array of strings to look for and strings to replace them with.
Callback function (optional) which is executed before the deployment steps are executed.
@TODO - it would be nice to make this more of a feature, e.g. return true to confirm the beforeDeployment
check went OK, or return false to indicate there was a problem and that the deployment steps should not be taken. Watch this space.
grunt.js
) but could support additional configuration files for Gulp or any other build framework.bin/
.Make sure you have NPM installed. Then it's just a simple case of:
npm install
Run tests as follows:
node_modules/.bin/vows test/vows.js
If tests hang on 'Waiting for tmp directory to clear...', chances are that there is an NPM dependency that is not being fulfilled. If you encounter this:
npm install
If you still have problems:
Error: Cannot find module 'X'
, in which case you should add it to package.json, run npm install
, clear the tmp
directory again and run the tests.FAQs
Automated application modification and deployment for multiple environments.
The npm package grunt-deploy-to-env receives a total of 3 weekly downloads. As such, grunt-deploy-to-env popularity was classified as not popular.
We found that grunt-deploy-to-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.