
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Manage & Deploy I18n-ready Squarespace Themes to different sites. Developed in conjunction with Big Human (http://bighuman.com)
Grunt-based utilities for Squarespace themes, specifically deployment and internationalization. Developed in conjunction with Big Human
This plugin requires Grunt 0.4.x
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install grunt-sqsp --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-sqsp');
Squarespace has git endpoints for deployment of themes. Since
these are also exposed via FTP, they are not a good "definitive" git
repository. The idea with this toolset is to keep your theme code on
GitHub or something similar, and deploy via an equivalent of
git push --force
. This also allows you to keep Grunt configs and other
meta-data in git while being outside of your theme.
The current working directory's theme
is built and pushed, regadless
of the state in git, etc. So you can make a small edit, save, and deploy
right away.
In you Gruntfile, you can configure multiple targets, e.g. staging and
your live site. For each target, this library exposes two tasks: build and deploy.
Simply calling grunt sqsp:target
will build first and then deploy.
The build task creates a directory called ./build-{target}/
, with the
compiled contents of ./theme/
. The build directory is wiped first if it exists.
The deploy task creates a git repository in the build directory for the
target, commits everything as an --orphan
commit, and pushes
(--force
) to the Squarespace remote as configured. Note that the git history on
Squarespace will not include the actual deploy history.
Files without .ejs
are copied from ./theme/
into ./build-{target}/
as-is.
Any files ending with .ejs
in the theme are copied for each locale and compiled
using target- and locale-specific config variables. .ejs
endings are stripped when the
compiled files are saved into ./build/
. For example, you would want
a different region site.region
per locale.
This part of grunt-sqsp is still in flux and might move to another repo, but your template.conf.ejs file can have layouts and navigations filled out by grunt-sqsp.
"layouts" : <%- sqspLayouts %>,
"navigations" : <%- sqspNavigations %>,
FAQs
Manage & Deploy I18n-ready Squarespace Themes to different sites. Developed in conjunction with Big Human (http://bighuman.com)
The npm package grunt-sqsp receives a total of 0 weekly downloads. As such, grunt-sqsp popularity was classified as not popular.
We found that grunt-sqsp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.