
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
pzl-spfx-tasks
Advanced tools
One shared place for node tasks used by our SPFx solutions.
Creates a .env file in the current folder (process.cwd()). This is ran as a part of the pre-watch.js task.
Creates a config/serve.json file from the template config/serve.sample.json for the current folder.
Runs modifyConfig.js.
Runs createEnviromentFile.js. Also generates a config/.generated-solution-config.json if the channel environment variable SERVE_CHANNEL is set and not main.
Also runs ./modifyConfig.js to modifiy the included bundles.
Updates config/config.json for the solution based on the environment variable SERVE_BUNDLE_REGEX.
This script generates an overview of components by loading configuration files and writing the result to an output file.
path: Provides utilities for working with file and directory paths.glob: Matches file paths using patterns.fs: Provides file system-related functionality.util: Custom utility functions for logging and file operations.colors: Provides color formatting for console output.ROOT_PATH: The root directory of the project.CONFIG_FILES_PATTERN: Pattern to match configuration files.OUTPUT_FILE: Path to the output file where the overview will be written.loadJsonFile(file)file: Path to the JSON file.null on failure.loadManifestFile(configFile, bundle)configFile: Path to the configuration file.bundle: Bundle object containing information about the components.null on failure.loadConfigFile(configFile)configFile: Path to the configuration file.generateComponentOverview()This script generates C# classes based on JSON data. It is designed to work with a specific JSON file structure containing information about SPFx components.
path: Provides utilities for working with file and directory paths.glob: Matches file paths using patterns.fs: Provides file system-related functionality.util: Custom utility functions for logging and file operations.lodash: Provides utility functions for working with arrays, objects, and other data types.package.json: Contains metadata about the project.ROOT_PATH: The root directory of the project.INPUT_JSON_FILE: Path to the input JSON file containing component data.NAMESPACE: Namespace for the generated C# classes.DIRNAME: Path to the directory where the generated C# files will be saved.FILE_NAME: Name of the generated C# file.MAIN_CLASS_NAME: Name of the main static class containing all components.COMPONENT_CLASS_NAME: Name of the C# class representing SPFx components.generateClasses(jsonFile)jsonFile: Path to the JSON file containing component data.generateComponentClass(component, classType = 'public readonly')component: Component object containing information about the component.classType: Type of the class to generate (default is 'public readonly').generateAppClassName(app)app: Name of the SPFx app.generateAppClass(app, components, classType = 'public class', classMemberType = 'public static readonly')app: Name of the SPFx app.components: Array of component objects belonging to the app.classType: Type of the class to generate (default is 'public class').classMemberType: Type of the class members to generate (default is 'public static readonly').generateCSharpCode(jsonContent)jsonContent: JSON content used to generate the C# code.FAQs
One shared place for node tasks used by our SPFx solutions.
We found that pzl-spfx-tasks demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.