
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
grunt-noflo-manifest
Advanced tools
Grunt plugin for updating NoFlo package manifests
This plugin requires Grunt ~0.4.1
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install grunt-noflo-manifest --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-noflo-manifest');
In your project's Gruntfile, add a section named noflo_manifest
to the data object passed into grunt.initConfig()
.
grunt.initConfig({
noflo_manifest: {
update: {
// Target-specific file lists and/or options go here.
},
},
});
This Grunt plugin does its best to detect which platform(s) a particular graph or component is meant for, and adding them to only those manifest files.
With JSON graphs the platform detection is based on the environment.type
property of the graph.
With other source files (FBP, CoffeeScript, etc), the platform detection happens using the @runtime
annotation, which should be in the beginning of the file:
# @runtime noflo-browser
If platform cannot be detected from a file it is assumed to be available for all platforms.
grunt.initConfig({
noflo_manifest: {
both: {
files: {
'package.json': ['graphs/*', 'components/*'],
'component.json': ['graphs/*', 'components/*']
},
}
},
});
grunt.initConfig({
noflo_manifest: {
nodeonly: {
files: {
'package.json': ['graphs/*', 'components/*']
},
}
},
});
In lieu of a formal styleguide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code using Grunt.
FAQs
Grunt plugin for updating NoFlo package manifests
We found that grunt-noflo-manifest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.