
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
ngx-deploy-npm
Advanced tools
Publish your angular packages to npm by just run `npm deploy your-packages`
Table of contents:
This command has the following prerequisites:
ng update @angular/cli @angular/core
to upgrade your project if necessary)This quick start assumes that you already an existing Angular project with a publishable package created
Add ngx-deploy-npm
to your project. It will configure all your libraries present in the project
ng add ngx-deploy-npm
Deploy your library to NPM with all default settings. Your library will be automatically built in production mode.
ng deploy your-library
Your library should be published on npm. So go and check npm.js
🚧 coming soon 🚧
-c
production
(string)ng deploy
– Angular project is build in production modeng deploy --configuration=test
– Angular project is using the configuration test
(this configuration must exist in the angular.json
file)A named build target, as specified in the configurations
section of angular.json
.
Each named target is accompanied by a configuration of option defaults for that target.
Same as ng build --configuration=XXX
.
latest
(string)ng deploy --tag alpha
– Your package will be available for download using that tag, npm install your-package@alpha
useful for RC versions, alpha, betas.Registers the published package with the given tag, such that npm install @
will install this version. By default, npm publish
updates and npm install
installs the latest
tag. See npm-dist-tag
for details about tags.
public
(string)ng deploy --access public
Tells the registry whether this package should be published as public or restricted. Only applies to scoped packages, which default to restricted. If you don’t have a paid account, you must publish with --access public to publish scoped packages.
public
(string)ng deploy --otp TOKEN
If you have two-factor authentication enabled in auth-and-writes mode then you can provide a code from your authenticator with this.
false
(boolean)ng deploy --dry-run
For testing: Run through without making any changes. Execute with --dry-run and nothing will happen. A list of options will be printed
To avoid all these command-line cmd options, you can write down your configuration in the angular.json
file in the options
attribute of your deploy project's architect. Just change the kebab-case to lower camel case. This is the notation of all options in lower camel case:
A list of all available options is also available here.
Example:
ng deploy your-library --tag alpha --access public --dry-run
becomes
"deploy": {
"builder": "ngx-deploy-npm:deploy",
"options": {
"tag": "alpha",
"access": "public",
"dryRun": "true"
}
}
And just run ng deploy
😄.
ℹ️ You can always use the --dry-run option to verify if your configuration is right.
The licence and the readme must be in the root of the library. They are being copyed at the moment of deployment
This deployer do not bumps or creates a new version of the package, it just build the package/library, take the package.json as it and publish it.
You must take care about the version by yourself. Maybe using a script that sets the version
We are looking forward to the following features:
ng add
Your feature that's not on the list yet?
We look forward to any help. PRs are welcome! 😃
Code released under the MIT license.
FAQs
Publish your libraries to NPM with just one command
The npm package ngx-deploy-npm receives a total of 13,347 weekly downloads. As such, ngx-deploy-npm popularity was classified as popular.
We found that ngx-deploy-npm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.