Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
[![Build Status](https://travis-ci.org/Ralltiir/ralltiir.svg?branch=master)](https://travis-ci.org/Ralltiir/ralltiir) [![Coverage Status](https://coveralls.io/repos/github/Ralltiir/ralltiir/badge.svg?branch=master)](https://coveralls.io/github/Ralltiir/ra
Ralltiir 前端极速浏览框架,是一种前端异步单页技术。 点击超链接或浏览器跳转时,异步地获取数据并将内容展现给用户。 以此来减少用户等待时间,以及提高页面渲染速度。Ralltiir 主要特性如下:
npm install -g ralltiir
Ralltiir 是由一系列技术构成的解决方案,为了最大限度地灵活和通用 Ralltiir 采取分层设计,产品方可通过编写 Service 来控制具体的页面入场、渲染和退场行为。 Ralltiir 整体架构中包括低层的 AMD 环境、 Ralltiir 框架核心。
有 Node.js 环境后,使用 npm 安装所有依赖:
npm install
完成开发后确保可以通过 Lint 和单元测试可以通过:
npm run lint
npm run test
使用 NPM version 发布到 npm 和 Github,例如发布一个 patch 版本:
npm version patch
npm publish
首先安装 gitbook 依赖:
npm run doc:install
本地预览文档:
npm run doc:preview
部署到 <ralltiir.github.io/ralltiir>:
npm run doc:deploy
FAQs
[![Build Status](https://travis-ci.org/Ralltiir/ralltiir.svg?branch=master)](https://travis-ci.org/Ralltiir/ralltiir) [![Coverage Status](https://coveralls.io/repos/github/Ralltiir/ralltiir/badge.svg?branch=master)](https://coveralls.io/github/Ralltiir/ra
The npm package ralltiir receives a total of 64 weekly downloads. As such, ralltiir popularity was classified as not popular.
We found that ralltiir demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.