
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
rush-init-project-plugin
Advanced tools
Initialize project in Rush.js monorepo like a pro!
Rush.js >= 5.57.0
Please follow the official doc to enable this plugin in your repo.
Let's say you want to add a new template named my-template
, put the template files under common/_templates/my-template
folder.
common/_templates
└── my-template
├── README.md
└── package.json
Now, run rush init-project
prompts you select a template list, which contains my-template
.
After you answer some simple questions, files under common/_templates/my-template
will be added into your project folder, and project configuration will be added to rush.json
as well.
Kind of boring in a template way?
You can create a configuration file to extend initialization process.
See HERE for detail.
The whole CLI is based on node-plop
All directories under common/_templates/<template_name>
are template source code, except those who prefixes with _
. For instance, folder named _plugins
is treated as internal folder not template folder where you can store shared code across templates.
All source code will be rendered by handlebars, while using custom render engine is supported.
Plenty of handlebar helpers are provided as default by handlebars-helpers
Third party node modules can be used in init.config
configuration file by installing them into the corresponding autoinstaller folder, such as common/autoinstallers/rush-plugins/
.
Default prompts includes:
packageName
: "name"
field in package.json
unscopedPackageName
: packageName
without npm scopeprojectFolder
: the dest file path where the template will be rendereddescription
: project descriptionauthorName
: author nameFAQs
Rush plugin for initialize project in monorepo
The npm package rush-init-project-plugin receives a total of 17,422 weekly downloads. As such, rush-init-project-plugin popularity was classified as popular.
We found that rush-init-project-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.