
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
RNA is a template/model based code generator.
It takes mustash templates and json models to generate code.
Usage: rna [--dir working_directory] <model> <template> [output]
rna [--dir working_directory] <rna_config_file>
model:
supported formats:
- json
template:
supported formats:
- handlebars template
rna_config_file:
supported formats:
- json
possible objects:
{
model: <string>,
template: <string>,
output: <string>
}
or
{
RnaConf: {
model: <string>,
template: <string>,
output: <string>
}
}
The advantage of using the second form is to be able tu have the same file for
the rna configuration and the model.
You can use everything Handlebars has to offer.
Your model must be a valid json object. (JSON.parse compliant).
There are two helpers available: $files and $custom.
Example :
{
"$files": {
"matching": "*.coffee",
"type": "file",
"ignore": "index.coffee"
}
}
Here, the configuration of the $files field will be replaced by a liste of matching files.
Configuration options :
{
"$files": {
"dir": ".", "_": "base directory",
"matching": "*.coffee", "_": "only files matching *.coffee will be listed",
"type": "file", "_": "possible: file | dir (both if not specified)",
"ignore": "index.coffee", "_": "either a file name or a glob match",
"contains": "filename", "_": "directories containing a specific file (only with type=dir)"
}
}
Shamefully not tested ...
configuration:
{
"dir": ".", "_": "base directory",
"path": "./", "_" : "import path",
"data": {}, "_": "data to pass to the custom helper"
}
FAQs
RNA is a handlebars-based code generator.
We found that rna demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.