Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
ignore-sync
Advanced tools
a cli tool to build and sync *ignore files across files and repositories
Github default .gitignore
doesn't cover all our needs, we always need to compose and manage multiple .gitignore
files from github, such as Node.gitignore + macOS.gitignore, in order to remove all the noises in our development. It should be automated.
For library developer, we often need to compose a .npmignore
from .gitignore
and some extra ignore patterns that we do not wish to ignore by .gitignore
, such as test files and .*rc
files. If .gitignore
is updated, you will need to update corresponding part of .npmignore
manually. We should avoid this repetitive work.
a short example on how ignore-sync
handle ignore files
[github/gitignore]
Node.gitignore
Global/macOS.gitignore
[inline]
*.test.js
yarn.lock
node >= 7.6
npm install --save-dev ignore-sync
package.json
{
"scripts": {
+ "ignore-sync": "ignore-sync ."
}
}
*ignore-sync
files, then npm run ignore-sync
, all corresponding ignore files will be generated.ignore-sync
works on any ignore file that name end with ignore
, such as .gitignore
, .npmignore
, .eslintignore
, etc. Simply creating a file that end with ignore-sync
.
example: .gitignore-sync
-> .gitignore
create a source tag in your *ignore-sync
file to identify the source of ignore patterns
[put_source_tag_here]
different source tag identifies different source of ignore patterns
[inline]
[local]
*ignore-sync
file[$username/$repo]
npm run ignore-sync
FAQs
a CLI tool to build and sync *ignore files across files and repositories
The npm package ignore-sync receives a total of 2,895 weekly downloads. As such, ignore-sync popularity was classified as popular.
We found that ignore-sync demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.