
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
grunt-deploy-to-env
Advanced tools
Automated application modification and deployment for multiple environments.
Allows you to configure and deploy a project to multiple environments. grunt-deploy-to-env takes a folder of files, replaces some of the file contents (e.g. local.com => example.com) then deploys the changed files to a specific location, all without changing the original files. This makes it possible to have one common project and deploy it to multiple environments.
grunt.config(['deploy'], {
live: {
server: '/Volumes/mounts/live_environment',
source: '/Users/foo/Desktop/my_project',
path: '/project-namespace',
replacements: [
{
from: 'http://127.0.0.1:8000',
to: 'http://example.com'
},
{
from: 'Local',
to: 'Live'
}
],
beforeDeployment: function () {
// perform some checks before allowing deployment
}
}
});
With this example, when you run grunt live you would:
beforeDeployment function/Users/foo/Desktop/my_project/Volumes/mounts/live_environment/project-namespace/my_project, creating the project-namespace directory if necessary, or overwriting the previous contents if they already existed.Absolute path to the location of your server mount.
Absolute path to the local project.
Relative path to append to the server path. This allows you to deploy to example.com/something, rather than just the root of example.com.
Array of strings to look for and strings to replace them with.
Callback function (optional) which is executed before the deployment steps are executed.
@TODO - it would be nice to make this more of a feature, e.g. return true to confirm the beforeDeployment check went OK, or return false to indicate there was a problem and that the deployment steps should not be taken. Watch this space.
grunt.js) but could support additional configuration files for Gulp or any other build framework.bin/.Make sure you have NPM installed. Then it's just a simple case of:
npm install
Run tests as follows:
node_modules/.bin/vows test/vows.js
If tests hang on 'Waiting for tmp directory to clear...', chances are that there is an NPM dependency that is not being fulfilled. If you encounter this:
npm installIf you still have problems:
Error: Cannot find module 'X', in which case you should add it to package.json, run npm install, clear the tmp directory again and run the tests.FAQs
Automated application modification and deployment for multiple environments.
We found that grunt-deploy-to-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.