
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
rokka-stacks-generator
Advanced tools
Generate and upload rokka.io stacks based on yml files in a component folder.
This small cli tools generates rokka stacks and uploads them to rokka.io.
Run the following command in your project folder:
npm install rokka-stacks-generator
Add a stacks.yml file to your component folder. The command will recursively search all yml files and create a json file that will be uploaded to rokka.io
npx rokka-stacks-generator --folder /your/folder --output /output/rokka.json --apikey your_api_key --organization your-rokka-organization
name: slider_image
ratio:
w: 4
h: 3
pictures:
mobile:
width: 200
height: 100
tablet:
width: 600
height: 400
desktop:
width: 500
height: 350
widescreen:
width: 800
height: 600
Now you can run the cli command and search for the stacks.yml definitions. Provide a folder to look for.
In case you need to reuse a stack, you can generate one by defining the name as the value of the pictures
viewport value.
Example:
name: noop_test
pictures:
sm: dynamic/noop
FAQs
Generate and upload rokka.io stacks based on yml files in a component folder.
The npm package rokka-stacks-generator receives a total of 0 weekly downloads. As such, rokka-stacks-generator popularity was classified as not popular.
We found that rokka-stacks-generator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.