
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Onepage generates a one-page navigable static website from markdown files.
$ npm install onepage -g
$ onepage new <folder_name>
This command creates a new onepage project in a folder you are currently in; next in a newly created folder:
$ onepage watch
In this mode a server instance observes every change in your markdown, jade & less files. You have to point you browser to http://localhost:8000
$ onepage compile
$ onepage addpage <page_name>
You can find all your markdown files in the <your_project_folder>/res/_pages folder
Options for each created page are in it's head section (before //***// mark).
Here you can set:
icon-) of the icon name. The full list of icons: Elusive IconsIf you are ready to move your files to a server (and you have provided your server data in the configuration file):
$ onepage deploy
You will find a configuration file in your project folder in the res folder.
Set the color scheme in the config.json file. You can add you own color scheme to the <your_project_folder>/res/less/color-themes folder.
You will find all styling files in the <your_project_folder>/res/less folder. If in watch mode (cli command onepage watch) all changes are applied as you save the less file.
All your templates are in <your_project_folder>/res/templates folder.
FAQs
Static one-page site generator
We found that onepage demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.