
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
A simple setup micro-forum built in Node.js with Express and MongoDB.
$ npm install linear --save
const linear = require('linear');
linear.startWithConfig({
'site_name': 'Sample Forum'
});
Type: String
Default: 'Sample Forum'
Name used in both header
and title
tags throughout the site.
Type: Object
Default: {'static': './static'}
Directories used to overwrite the assets included with linear.
static
: All static files: CSS, Fonts, JavaScriptlocales
: Localization files.views
: Server-side templates.Note: Replacing the locales
directory is a destructive action. Changing static
or views
is a additive action as the server will look for static files and view templates in the config specified directories first.
Type: String
Default: ''
Tracking code for Google Analytics. http://www.google.com/analytics/
Place the following key/value pairs in an .env
file locally and within the settings panel of your Heroku application.
Read more at https://devcenter.heroku.com/articles/nodejs-mongoose#mongodb-connectors.
MONGOLAB_URI=mongodb://username:password@mongolab.com/linear
Omitting either of these social networks will prevent it from showing up on the login screen.
For more information on how to retrieve these keys see https://github.com/trylinear/linear/wiki/Social-Setup#facebook.
FACEBOOK_CLIENT_ID=<token>
FACEBOOK_CLIENT_SECRET=<token>
FACEBOOK_CALLBACK=http://localhost:5000/login/facebook/callback
For more information on how to retrieve these keys see https://github.com/trylinear/linear/wiki/Social-Setup#google.
GOOGLE_CLIENT_ID=<token>
GOOGLE_CLIENT_SECRET=<token>
GOOGLE_CALLBACK=http://localhost:5000/login/google/callback
For more information on how to retrieve these keys see https://github.com/trylinear/linear/wiki/Social-Setup#twitter.
TWITTER_CONSUMER_KEY=<token>
TWITTER_CONSUMER_SECRET=<token>
TWITTER_CALLBACK=http://localhost:5000/login/twitter/callback
The default template supports Twitter Cards. To get these to display you must first run a sample post through the Card Validator and then Request Approval to be whitelisted.
Read more at https://github.com/expressjs/session#sessionoptions.
SECRET=<token>
1.0.5 (January 14, 2017)
FAQs
A simple setup micro-forum built in Node.js with Express and MongoDB.
The npm package linear receives a total of 305 weekly downloads. As such, linear popularity was classified as not popular.
We found that linear demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.