Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
nodebb-plugin-composer
Advanced tools
NOTE: This is forked off NodeBB Composer Default
This package is intended to be private on SEEK-Jobs under the @seek
npm org.
To create a public package,
run skuba init
and select the oss-npm-package
template.
Next steps:
log
Writes the module name to stdout. Thrilling stuff.
import { log } from '@seek/nodebb-composer-cnc-maxconnect';
log();
yarn install
yarn test
# Fix issues
yarn format
# Check for issues
yarn lint
# Compile source
yarn build
# Review bundle
npm pack
This package is published to the npm registry under the private @seek
npm org with Gutenberg, SEEK's central npm publishing pipeline.
It depends on this repo being hosted on SEEK-Jobs with appropriate access.
This package is published with semantic-release, which requires a particular commit format to manage semantic versioning.
You can run the interactive yarn commit
command in place of git commit
to generate a compliant commit title and message.
If you use the Squash and merge
option on pull requests, take extra care to format the squashed commit in the GitHub UI before merging.
Commits to the master
branch will be released with the latest
tag,
which is the default used when running npm install
or yarn install
.
semantic-release prescribes a branch-based workflow for managing distribution tags.
You can push to other branches to manage betas, maintenance updates to prior major versions, and more.
Here are some branches that semantic-release supports by default:
Git branch | npm dist-tag |
---|---|
master | latest |
alpha | alpha |
beta | beta |
next | next |
1.x | release-1.x |
For more information, see the semantic-release docs on triggering a release.
FAQs
Default composer for NodeBB
The npm package nodebb-plugin-composer receives a total of 0 weekly downloads. As such, nodebb-plugin-composer popularity was classified as not popular.
We found that nodebb-plugin-composer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.