Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
maven-deploy
Advanced tools
A simple Node.js module to create a war-/jar-package and install/deploy to a local/remote Maven repository
A simple Node.js module to create a war-/jar-package and install/deploy to a local/remote Maven repository. It uses
mvn
to do the actual deployment, so you need maven installed locally.
Project name and version is extracted from package.json and used as artifactId and maven version. Supply an object
litteral with other Maven related config. Values from package.json can be used by adding curly-braces around the key.
Example {finalName: "{name}-{version}"}
.
The package is created from the {buildDir}/
folder. So you need to make sure that the files you want in the
package is put there before packaging. The default is dist/
. The package file will be output in the same folder.
var config = {
"groupId" : "com.example", // required - the Maven group id.
"artifactId" : "{name}", // the Maven artifact id.
"buildDir" : "dist", // project build directory.
"finalName" : "{name}", // the final name of the file created when the built project is packaged.
"type" : "war", // type of package. "war" or "jar" supported.
"fileEncoding" : "utf-8" // file encoding when traversing the file system, default is UTF-8
"repositories" : [ // array of repositories, each with id and url to a Maven repository.
{
"id": "example-internal-snapshot",
"url": "http://mavenproxy.example.com/example-internal-snapshot/"
},
{
"id": "example-internal-release",
"url": "http://mavenproxy.example.com/example-internal-release/"
}
]
};
It might be useful to store the config as a separate json-file, so you can re-use it in multiple files.
var config = require('./maven-config.json');
It expects output from the project to be in dist/ directory. It zips the content and outputs it to
dist/{finalName}.{type}
Usage: maven.package( [callback] )
Example:
var maven = require('maven-deploy');
maven.config(config);
maven.package();
Runs package first, then installs the package to your local Maven repository.
Usage: maven.install( [callback] )
Example:
var maven = require('maven-deploy');
maven.config(config);
maven.install();
Runs package first, then deploys the package to the specified Maven repository.
Usage: maven.deploy( repositoryId, [snapshot = false], [callback])
var maven = require('maven-deploy');
maven.config(config);
maven.deploy('example-internal-snapshot', true);
var maven = require('maven-deploy');
maven.config(config);
maven.deploy('example-internal-release');
var maven = require('maven-deploy');
maven.config(config);
maven.deploy('example-internal-release', 'file.jar');
We would love your contribution, please consult the contributing page for how to make your contributions land into the project as easily as possible.
1.5.0
FAQs
A simple Node.js module to create a war-/jar-package and install/deploy to a local/remote Maven repository
The npm package maven-deploy receives a total of 5,876 weekly downloads. As such, maven-deploy popularity was classified as popular.
We found that maven-deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.