Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
kosmtik-deploy
Advanced tools
# Kosmtik-deploy
Deploy your Kosmtik project on a remote server. Only SSH supported for now.
Experimental, not suited for production use.
## Install
While in your kosmtik root, type:
node index.js plugins --install kosmtik-deploy
## Usage
Only command line for now. Eg.:
node index.js deploy ~/Code/maps/transilien/project.yml
Get details about the available options with:
node index.js deploy -h
All the options can also be set in your project config file (.mml/.yml),
using the deploy
key. For example:
{
"protocol": "ssh", // optional, as it's the default (and only one supported)
"username": "foo",
"password": "123456",
"root": "xxx/yyyy/zzz", // remote root where to scp your project
"ignore": ['this/dir', 'this/file.txt'] // paths to be ignored
}
If you are using public key based authentication, you can use one those option:
~/.ssh/id_rsa
: do nothing, it will be automaticprivateKeyPath
key with the path to your private keyprivateKey
key with your SSH private key contentSSH is managed under the hood by the ssh2 module, so you may
have a look there to get more details about the available options (you can use all of those in your
project.yml
deploy
key).
Also, remember that you can use your local config file to manage project config information your don't
want to visible in the versionned project.yml/.mml
file.
Here is an example of a localconfig.js
file:
exports.LocalConfig = function (localizer, project) {
project.mml.compareUrl = 'http://{s}.tile.thunderforest.com/transport/{z}/{x}/{y}.png';
localizer.where('Layer').if({'Datasource.type': 'postgis'}).then({
'Datasource.dbname': 'idf',
'Datasource.password': '',
'Datasource.user': 'ybon',
'Datasource.host': ''
});
project.mml.deploy = {
host: 'xxxx.kimsufi.com',
root: 'maps/transilien'
};
};
FAQs
Deploy your local Kosmtik project on a remote server
The npm package kosmtik-deploy receives a total of 0 weekly downloads. As such, kosmtik-deploy popularity was classified as not popular.
We found that kosmtik-deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.