
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A multi-repos dev tool based on yarn and git.Rigjs is intended to be the simplest way to develop,share and deliver codes between different developers or different projects.
yarn global add rigjs
Rigjs use yarn workspaces to achieve module-hoisting. About yarn workspaces.
Use n to update NodeJS.
yarn global add n
#upgrade to lts
sudo n lts
#or specify the version.
sudo n 14.19.1
#in your project's root path(same level with package.json):
rig init
package.rig.json5 will be added in root path.
rig add [your-git-ssh-url] [tag]
example:
rig add git@github.com:FlashHand/rig-demo-1.git 0.0.1
import or require the module.
const {hello} = require('rig-demo-1');
hello();
{
dependencies: {
'rig-demo-1': {
source: 'git@github.com:FlashHand/rig-demo-1.git',
version: '0.0.1',
}
}
}
then
yarn install
rig dev [package's name|git-ssh-url]
When package is already in package.rig.json5:
rig dev rig-demo-1
When package is not in package.rig.json5:
rig dev git@github.com:FlashHand/rig-demo-1.git
rig-demo-1 will be installed in rig_dev directory.And a symlink of the module will be created in node_modules.
{
dependencies: {
'rig-demo-1': {
source: 'git@github.com:FlashHand/rig-demo-1.git',
version: '0.0.1',
dev: true //false by default
}
}
}
then
yarn install
get git-ssh url: git@github.com:FlashHand/rig-demo-1.git
rig dev git@github.com:FlashHand/rig-demo-1.git
cd your_project_path
cd rig_dev/rig-demo-1
yarn init
echo "module.export={hello:()=>{console.log('hello')}}" > index.js
const {hello} = require('rig-demo-1');
hello();
publish tag
cd rig_dev/rig-demo-1
git add .
git commit -m 'demo for rig'
git tag 0.0.1
git push origin your_branch --tag
Modify package.rig.json5
{
dependencies: {
'rig-demo-1': {
source: 'git@github.com:FlashHand/rig-demo-1.git',
version: '0.0.1',
// dev:true//Don't use dev mode in production.
}
}
}
I'm still developing new features in most flexible and unobtrusive way.So my team won't cost extra time to upgrade their applications' architecture.
Rigjs works great for my team in development of vue-apps,uni-apps,electron apps and nodejs apps.If you don't need many remote modules,it will work fine for you too.
FAQs
A multi-repos dev tool based on yarn and git.Rigjs is intended to be the simplest way to develop,share and deliver codes between different developers or different projects.
The npm package rigjs receives a total of 16 weekly downloads. As such, rigjs popularity was classified as not popular.
We found that rigjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.