
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
ophan-tracker-js
Advanced tools
Browser JavaScript client for Ophan.
$ npm install ophan-tracker-js
Install dependencies
$ brew install lighttpd
.../ophan/tracker-js $ npm install
In one terminal window:
.../ophan/tracker-js $ grunt
.../ophan/tracker-js $ grunt watch
In another terminal window:
.../ophan/tracker-js $ lighttpd -f lighttpd.conf -D
Install FoxyProxy (https://getfoxyproxy.org/downloads/) in your browser and create a rule that forces j.ophan.co.uk to localhost 8000. (For me FoxyProxy needed a few switches on and off before it decided to start talking to lighttpd.)
In another terminal window, start a server that is running the Guardian frontend
Navigate to where you are running the Guardian locally (e.g. https://localhost:9000/uk)
Ensure FoxyProxy is enabled
Develop with pleasure
When you make a change to Tracker JS, you must release on both these systems:
ophan-tracker-js
, commonly used on internally developed Guardian sites like Guardian Frontend and Support Frontend.Ensure that before you merge a change, you first bump the version in package.json
. Please make sure you update the changes.md file too. If you have added a new Ophan client to support a new platform, please add the path to the built output file to the files list in package.json
.
Whenever the Tracker script is changed, its ophan-tracker-js
NPM package will
need to be updated to a new version.
If you don't already have an NPM account, be sure to set up two-factor authentification.
Log into NPM
$ npm login
Compile
.../ophan/tracker-js $ npm install
Publish
.../ophan/tracker-js $ npm publish
You will need to be added as an owner of ophan-tracker-js
. To find the current owners:
$ npm owner ls ophan-tracker-js
To add someone as an owner:
npm owner add npm.username ophan-tracker-js
More information on setting owners is available in NPM's documentation.
FAQs
Browser JavaScript client for Ophan.
We found that ophan-tracker-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 68 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.