
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
lerna-script-preset-wix-npm-basic
Advanced tools
A preset for wix npm-based repos that exposes following tasks:
node_modules
, target
, *.log
.... also cleans yarn.lock
and package-lock.json
build
and test
tasks for all modules with incremental runs - does not run tests for unchanged modules;.nvmrc
from root of repo to all modules, module versions, package.json
docs/repo links, etc.Given you have non-lerna project, install needed modules:
npm install --save-dev lerna lerna-script lerna-script-preset-wix-npm-basic husky
init lerna:
node_modules/.bin/lerna init
add to lerna.json
:
"lerna-script-tasks": "lerna-script-preset-wix-npm-basic"
setup your package.json
{
"name": "aggregator",
"private": true,
"version": "1.0.0",
"scripts": {
"prepush": "lerna-script sync",
"postinstall": "lerna bootstrap",
"clean": "lerna-script clean",
"test": "lerna-script test",
"idea": "lerna-script idea"
},
"devDependencies": {
"husky": "^0.14.3",
"lerna": "^2.0.0",
"lerna-script": "latest",
"lerna-script-preset-wix-npm-basic": "latest"
}
}
Then:
prepush
task will be executed by husky
and all sync actions will be performed;If preset almost works for you, you can reuse most of it but customize a selected task, like:
const preset = require('lerna-script-preset-wix-npm')();
function clean(log) {
preset.clean(log).then(() => {
//do your thing
});
}
module.exports = {
...preset,
clean
}
FAQs
preset for wix npm projects
We found that lerna-script-preset-wix-npm-basic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.