Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
repo2pdf is an innovative and versatile tool designed to seamlessly transform GitHub repositories into well-formatted, visually engaging, and easy-to-navigate PDF files. By automating the process of cloning repositories and parsing code files, repo2pdf serves a variety of use-cases including teaching, code reviews, offline referencing, archiving, AI training, and document embedding. The tool's flexibility expands the horizons of interacting with codebases by bridging the gap between the dynamic world of coding and the static, universally accessible format of PDFs, catering to a multitude of user needs and creative applications.
repo2pdf can be installed by either directly using NPX or cloning the repository from GitHub. The steps and prompts vary based on the chosen method.
NEW! Use the webapp here
This method downloads and installs the latest version of repo2pdf from the NPM registry.
npx repo2pdf
This method involves manually cloning the repo2pdf repository and setting it up on your local machine.
git clone https://github.com/BankkRoll/repo2pdf
cd repo2pdf
npm install
npm run build
npm start
Please note that you need to have Node > 18 and git(for non-local repos) installed on your system in order to run repo2pdf.
repo2pdf automatically ignores certain file types and directories (e.g., .png
, .git
).
To customize the files and directories to ignore, you can add a repo2pdf.ignore
file to the root of your repository.
Please note that if you use a local repository, the repo2pdf.ignore
file must be in the root of the repository directory. And you might need to add more directories to the ignore list, as the script does not automatically ignores different build files and directories.
{
"ignoredFiles": ["tsconfig.json", "dist", "node_modules"],
"ignoredExtensions": [".raw"]
}
npm install [package-name]
// Example: Changing font size in syntax.ts
doc.fontSize(12);
{
"ignoredFiles": ["tsconfig.json"],
"ignoredExtensions": [".md"]
}
Your insights, skills, and valuable time can make a huge difference in the evolution of repo2pdf! We're always excited to see the community helping in shaping this tool to be even more efficient and feature-rich.
Encountered a hiccup? We're here to help! Please:
Have a brilliant idea for a new feature or an improvement to an existing one? We're all ears! Please:
If you're up for rolling up your sleeves to contribute code to fix a bug or implement a new feature, here's how you can get started:
In your pull request, please provide a clear description of the changes you've made. We appreciate contributions that adhere to our coding conventions and are consistent with the existing codebase - it helps us maintain the quality of the project and makes the review process more efficient.
Here are some feature ideas and improvements that could be implemented in repo2pdf to enhance its functionality and user experience:
Feel free to contribute to the project by implementing any of these ideas or suggesting new ones!
We're ever grateful for the valuable contributions from our community. Meet the people who're helping shape repo2pdf:
repo2pdf is open source software, licensed under the MIT License. See the LICENSE
file for more information.
FAQs
A CLI tool for generating a PDF document from a GitHub repository
The npm package repo2pdf receives a total of 31 weekly downloads. As such, repo2pdf popularity was classified as not popular.
We found that repo2pdf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.