Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
scroungejs
Advanced tools
[!WARNING] This application is not suitable for production and is missing many tests, if you plan on using it, you are on you own.
An obscure build tool starting as an emacs elisp script in 2009. Scroungejs was used by foxsports.com and ties.com.
A test configuration is found in spec/
. Below is a config with common options. All options are optional and if you're unsure about an option, you likely don't need it.
await scroungejs({
version: process.env.npm_package_version,
inputpath: './src/',
outputpath: './build/',
iscompress: true,
isconcat: false,
// read this template html and output to basepage
basepagein: './src/index.tpl.html',
basepage: './build/index.html',
// join contents of these files to top of this tree's file
prependarr: [{
treename: 'app.js',
sourcearr: [
'./node_modules/three/build/three.js',
'./node_modules/hls.js/dist/hls.min.js'
]
}],
skipdeparr: [
'/hls.js'
],
// write these trees, the root file of a tree the treename
treearr: [
'app.js',
'app.css'
]
})
The example in test/
console-prints something like this when it runs,
[...] start: Tue Apr 03 2018 23:12:23 GMT-0700 (PDT)
[...] root: app.js
scroungejs-1.3.6:~/test/src/app.js
└─┬ scroungejs-1.3.6:~/test/src/views/viewsall.js
. ├─┬ scroungejs-1.3.6:~/test/src/views/viewb.mjs
. │ └─┬ scroungejs-1.3.6:~/test/src/controls/ctrlsall.js
. │ ├─┬ scroungejs-1.3.6:~/test/src/controls/ctrla.js
. │ │ └── scroungejs-1.3.6:~/test/src/models/modela.js
. │ └─┬ scroungejs-1.3.6:~/test/src/controls/ctrlb.js
. │ └── scroungejs-1.3.6:~/test/src/models/modelb.js
. └── scroungejs-1.3.6:~/test/src/views/viewa
[...] ugly: (app.js, .css, 1/2) ./src/views/viewa.less
[...] ugly: (app.js, .css, 2/2) ./src/views/viewb.less
[...] write: ./out/app.css ~25.93kb
[...] ugly: (app.js, .js, 1/9) ./src/models/modela.js
[...] ugly: (app.js, .js, 2/9) ./src/controls/ctrla.js
[...] ugly: (app.js, .js, 3/9) ./src/models/modelb.js
[...] ugly: (app.js, .js, 4/9) ./src/controls/ctrlb.js
[...] ugly: (app.js, .js, 5/9) ./src/controls/ctrlsall.js
[...] ugly: (app.js, .js, 6/9) ./src/views/viewb.mjs
[...] ugly: (app.js, .js, 7/9) ./src/views/viewa.js
[...] ugly: (app.js, .js, 8/9) ./src/views/viewsall.js
[...] ugly: (app.js, .js, 9/9) ./src/app.js
[...] write: ./out/app.js ~2016.23kb
[...] write: ./out/app.js.map
[...] write: ./index.html
[...] finish: 00:00:167 (mm:ss:ms)
It reads index.tpl.html,
<!DOCTYPE html>
<html>
<head>
<!-- <scrounge root="app.css"> -->
<!-- </scrounge> -->
<!-- <scrounge root="app.js"> -->
<!-- </scrounge> -->
</head>
<body></body>
</html>
It creates and updates a resulting index.html,
<!DOCTYPE html>
<html>
<head>
<!-- <scrounge root="app.css"> -->
<link href="./out/app.css" rel="stylesheet" type="text/css">
<!-- </scrounge> -->
<!-- <scrounge root="app.js"> -->
<script src="./out/app.js" type="text/javascript"></script>
<!-- </scrounge> -->
</head>
<body></body>
</html>
When iswatch
is true and concatenate is false
, updating a file shows this,
[...] update: scroungejs-1.3.6:~/test/src/lib/library.js
[...] write: ./index.html
FAQs
An obscure build tool starting as an emacs elisp script in 2009
The npm package scroungejs receives a total of 13 weekly downloads. As such, scroungejs popularity was classified as not popular.
We found that scroungejs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.