Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
jam-pack-nodegui
Advanced tools
Jam NodeGui applications into neat little packages.
Jam Pack NodeGui is a packing tool for NodeGui applications.
It can aid in producing packages in the following formats:
It aims to produce small packages which only include the files needed to run the application.
This tool has been spun off from my work on Extraterm and NodeGui. -- Simon
JPN is designed around some key guidelines:
The packaging process consists of a number of steps and is driven by a configuration file to customise each step.
Bundling your application into one file is recommended but not required. Bundling your application collects its dependencies into one file and separates them from any other test files or documentation that maybe be stored in your node_modules
directory.
macdeployqt
, linuxdeployqt
and friends?Many tools for packaging non-C++ Qt applications like NodeGui with JS, try to rely on C++ oriented tools like macdeployqt
or linuxdeployqt
to do their work. These tools are often a poor fit because they are busy with solving C++ executable and library problems which appear when trying to create portable binaries which can run on end user systems. In the case of NodeGui applications this is problem has already been solved by the NodeGui developers. The pre-compiled binaries and libraries which are downloaded when running a tool like npm
are already suitable for redistribution. That's just how npm
works! By expending some effort to eliminate unnecessary files, we can package and ship the project's file structure, as used during development, as the final file structure used on end user machines.
Besides a much simpler packaging process another big benefit is fewer differences between the file layout at development time and that used by the end user. Libraries and files aren't shuffled around as much, relative file paths remain the same, therefore reducing the chance of things working during development but not for end users.
JPN can be installed using npm install --save jam-pack-nodegui
or yarn add --dev jam-pack-nodegui
if you are using yarn.
MIT
Simon Edwards simon@simonzone.com
FAQs
Tool to package NodeGui applications
The npm package jam-pack-nodegui receives a total of 56 weekly downloads. As such, jam-pack-nodegui popularity was classified as not popular.
We found that jam-pack-nodegui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.