Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
lerna-script-preset-wix-npm-basic
Advanced tools
A preset for wix npm-based repos that exposes following tasks:
node_modules
, target
, *.log
.... also cleans yarn.lock
and package-lock.json
build
and test
tasks for all modules with incremental runs - does not run tests for unchanged modules;.nvmrc
from root of repo to all modules, module versions, package.json
docs/repo links, etc.Given you have non-lerna project, install needed modules:
npm install --save-dev lerna lerna-script lerna-script-preset-wix-npm-basic husky
init lerna:
node_modules/.bin/lerna init
add to lerna.json
:
"lerna-script-tasks": "lerna-script-preset-wix-npm-basic"
setup your package.json
{
"name": "aggregator",
"private": true,
"version": "1.0.0",
"scripts": {
"prepush": "lerna-script sync",
"postinstall": "lerna bootstrap",
"clean": "lerna-script clean",
"test": "lerna-script test",
"idea": "lerna-script idea"
},
"devDependencies": {
"husky": "^0.14.3",
"lerna": "^2.0.0",
"lerna-script": "latest",
"lerna-script-preset-wix-npm-basic": "latest"
}
}
Then:
prepush
task will be executed by husky
and all sync actions will be performed;If preset almost works for you, you can reuse most of it but customize a selected task, like:
const preset = require('lerna-script-preset-wix-npm')();
function clean(log) {
preset.clean(log).then(() => {
//do your thing
});
}
module.exports = {
...preset,
clean
}
FAQs
preset for wix npm projects
The npm package lerna-script-preset-wix-npm-basic receives a total of 0 weekly downloads. As such, lerna-script-preset-wix-npm-basic popularity was classified as not popular.
We found that lerna-script-preset-wix-npm-basic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.