
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
hof-sas-build
Advanced tools
Performs build workflow for hof apps in prod and development
Run a build by running hof-build from the command line in your project directory.
hof-build [task]
If no task is specified then all tasks will run.
It is recommended to alias hof-build to an npm script in your package.json.
browserify - compiles client-side js with browserifysass - compiles sassimages - copies images from ./assets/images directory to ./public/imagestranslate - compiles translation filesYou can additionally run a watch task to start a server instance, which will automatically restart based on changes to files. This will also re-perform the tasks above when relevant files change.
By default files inside node_modules directories and dotfiles will not trigger a restart. If you want to include these files then you can set --watch-node-modules and --watch-dotfiles flags respectively.
You can load local environment variables from a file by passing an --env flag to hof-build watch and creating a .env file in your project root that defines your local variables as follows:
MY_LOCAL_ENVVAR=foo
MY_OTHER_ENVVAR=bar
Note: export is not required, and values should not be quoted.
To load variables from a file other than .env you should pass the location of the file as a value on the --env flag.
hof-build watch --env .envdev
The default settings will match those for an app generated using hof-generator.
If a hof.settings.json file is found in the application root, then the build section of the settings file will be used to override the default configuration.
Alternatively you can define a path to a local config file by passing a --config option
hof-build --config /path/to/my/config.js
Any task can be disabled by setting its configuration to false (or any falsy value).
module.exports = {
browserify: false
};
Each task has a common configuration format with the following options:
src - defines the input file or files for the build taskout - defines the output location of the built code where relevantmatch - defines the pattern for files to watch to trigger a rebuild of this taskrestart - defines if this task should result in a server restartAdditionally the server instance created by watch can be configured by setting server config. Available options are:
cmd - defines the command used to start the serverextensions - defines the file extensions which will be watched to trigger a restartFAQs
Performs build workflow for hof apps in prod and development
The npm package hof-sas-build receives a total of 2 weekly downloads. As such, hof-sas-build popularity was classified as not popular.
We found that hof-sas-build demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.