
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
grunt-springroll-download
Advanced tools
Download and extract games from SpringRoll Connect.
This plugin requires Grunt ~0.4.0
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install --save grunt-springroll-download
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-springroll-download');
Type: String
Required as the end-point location for the SpringRoll Connect server. This URL must include the protocol ("http" or "https").
Type: String
The path to the output directory for the games. Games are automatically saved as in a folder matching the slug of the game.
Type: String
Default: prod
The global status to use for pulling games. This can either be prod
, dev
, stage
or qa
. For non-prod
release status, a token
option is required.
Type: String
A unique access token used for SpringRoll Connect to download non-public releases. It's recommended that you set your access token through an environmental variable. See section below SPRINGROLL_TOKEN
.
Type: Boolean
Default: false
Save JSON metadata associated with a game upon download. This data includes information like the version, title and capabilities.
Type: Boolean
Default: false
The downloaded archive will be the debug build of the game. The default downloads the release archive.
Each task contains a list of games. The game can be a String
(the slug
) or an Object
with the following properties:
Type: String
Default: undefined
The SpringRoll Connect game slug. If slug is undefined, must define a game.bundleId
.
Type: String
Default: undefined
The SpringRoll Connect game bundle identifier, alternative to game.slug
.
Type: String
Default: prod
The game status to use for pulling release. See the option status
for more information.
Type: String
Default: undefined
The specific version of a game to download. Versions should be in the Semantic Version schema (e.g. "1.0.0"). A token
option is required to download a specific version.
Type: String
Default: undefined
The specific Git commit hash of a game to download. A token
option is required to download a specific commit.
It's recommended to use environment variables to ignore sensitive information from your project's version control. To setup this for OS X:
vi ~/.bash_profile
export SPRINGROLL_TOKEN=blahblahblah
(where "blahblahblah" is your token). ~/.bash_profile
Type: String
Default: undefined
Instead of settings options.token
, you can define your personal access token through an environmental variable. This is recommended.
Type: String
Default: undefined
Instead of settings options.server
, you can define the path to SpringRoll Connect through an environmental variable.
This configuration will download the latest production releases of each of the games to the output folder using the default options.
grunt.initConfig({
springroll: {
options: {
server: 'http://springroll-connect.example.com',
dest: 'deploy/games'
},
// list of games
all: [
'air-show',
'pinecone-pass'
]
}
});
This configuration will download version 1.0.0
of air-show
and the latest development release of pinecone-pass
.
grunt.initConfig({
springroll: {
options: {
server: 'http://springroll-connect.example.com',
dest: 'deploy/games'
},
all: [
{
slug: 'air-show',
version: '1.0.0'
},
{
slug: 'pinecone-pass',
status: 'dev'
}
]
}
});
This configuration will create two subtasks to download either the latest QA releases of the games, or the latest production versions of the games.
grunt.initConfig({
springroll: {
options: {
server: 'http://springroll-connect.example.com',
dest: 'deploy/games'
},
debug: {
options: {
status: 'qa'
},
games: [
'air-show',
'pinecone-pass'
]
},
release: {
options: {
status: 'prod'
},
games: '<%= springroll.debug.games %>'
}
}
});
FAQs
> Download and extract games from SpringRoll Connect.
We found that grunt-springroll-download demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.