
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
The one stop CLI for using the OpenMRS 3.0 Frontend app.
You need Node.js with NPM. We recommend using version 16.17 (LTS) or later.
You can run the tool without installation using npx
, which is part of NPM. Just make sure to fulfill the prerequisites.
Alternatively, install the application globally using npm i openmrs -g
. Then you can run the tool without npx
, e.g., instead of npx openmrs ...
you run openmrs ...
.
The following commands are available. For an up-to-date help on your installation run npx openmrs --help
.
The --help
flag can also be applied to any command below, resulting in detailed information about the available options.
start
For developers.
Starts the app shell configured for the SPA reference application. Includes a default import map working against a working snapshot on the CDN.
Example:
# run the command
npx openmrs
develop
For developers and implementers.
Performs a debug build of the app shell and runs it against a given OpenMRS backend. Can be proxied to any network and used with any import map configuration.
Example:
# run the command
npx openmrs develop
build
For implementers.
Builds the app shell with a given configuration. Provides the assets necessary for the app shell in a distribution.
Example:
# run the command
npx openmrs build
assemble
For implementers.
Assembles an import map incl. assets to provide the frontend module assets for a distribution.
Example:
# run the command
npx openmrs assemble
FAQs
Unknown package
The npm package openmrs receives a total of 1,491 weekly downloads. As such, openmrs popularity was classified as popular.
We found that openmrs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.