Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
serverless-layers
Advanced tools
[![serverless](http://public.serverless.com/badges/v3.svg)](http://www.serverless.com) [![Issues](https://img.shields.io/github/issues/agutoli/serverless-layers.svg)](https://github.com/agutoli/serverless-layers/issues) [![License](https://img.shields.io/
dependencies
is updateddependencies
is not changed, it does not publish a new layernpm install -D serverless-layers
or
serverless plugin install --name serverless-layers
Add the plugin to your serverless.yml
file:
Example:
plugins:
- serverless-layers
custom:
serverless-layers:
functions: # optional
- my_func2
dependenciesPath: ./package.json
functions:
my_func1:
handler: handler.hello
my_func2:
handler: handler.hello
Example:
plugins:
- serverless-layers
custom:
serverless-layers:
# applies for all lambdas
- common:
dependenciesPath: ./my-folder/package.json
# apply for foo only
- foo:
functions:
- foo
dependenciesPath: my-folder/package-foo.json
- staticArn:
functions:
- foo
- bar
arn: arn:aws:lambda:us-east-1:<your_account>:layer:node-v13-11-0:5
functions:
foo:
handler: handler.hello
bar:
handler: handler.hello
Option | Type | Default | Description |
---|---|---|---|
compileDir | string | .serverless | Compilation directory |
layersDeploymentBucket | string | You can specify a bucket to upload lambda layers. Required if deploymentBucket is not defined. | |
customInstallationCommand | string | It specify a custom command to install deps ex. MY_ENV=1 npm --proxy http://myproxy.com i -P | |
customHash | string | Can specify custom string, that once changed will force a new build of the layer | |
retainVersions | int | null | Number of layer versions to keep, the rest versions will be removed after deployments |
Option | Type | Default | Description |
---|---|---|---|
packageManager | string | npm | Possible values: npm, yarn |
packagePath | string | package.json | (DEPRECATED) : Available for <= 1.5.0 , for versions >= 2.x please use compatibleRuntimes |
dependenciesPath | string | package.json | Note: >= 2.x versions. You can specify custom path for your package.json |
compatibleRuntimes | array | ['nodejs'] | Possible values: nodejs, nodejs10.x, nodejs12.x |
layerOptimization.cleanupPatterns | array | check | The pattern of files to cleanup in the layer artifact before uploading it. |
Option | Type | Default | Description |
---|---|---|---|
packageManager | string | bundle | Possible values: bundle |
dependenciesPath | string | Gemfile | Note: Available for >= 2.x versions. You can specify custom path for your requirements.txt |
compatibleRuntimes | array | ['ruby'] | Possible values: ruby2.5, ruby2.7 |
layerOptimization.cleanupPatterns | array | check | The pattern of files to cleanup in the layer artifact before uploading it. |
Option | Type | Default | Description |
---|---|---|---|
packageManager | string | pip | Possible values: pip |
dependenciesPath | string | requirements.txt | Note: Available for >= 2.x versions. You can specify custom path for your requirements.txt |
compatibleRuntimes | array | ['python'] | Possible values: python2.7, python3.x |
layerOptimization.cleanupPatterns | array | check | The pattern of files to cleanup in the layer artifact before uploading it. |
This plugin will setup follow options automatically if not specified at serverless.yml
.
Option | Type | Default |
---|---|---|
package.individually | bool | false |
package.patterns | array | ['node_modules/**'] |
package.excludeDevDependencies | bool | false |
serverless-layers-policy.json
{
"Version":"2012-10-17",
"Statement":[
{
"Effect":"Allow",
"Action":[
"s3:PutObject",
"s3:GetObject"
],
"Resource": "arn:aws:s3:::examplebucket"
},
{
"Effect":"Allow",
"Action":[
"cloudformation:DescribeStacks"
],
"Resource": "*"
},
{
"Effect":"Allow",
"Action":[
"lambda:PublishLayerVersion"
],
"Resource": "*"
}
]
}
MIT
Yes, thank you! This plugin is community-driven, most of its features are from different authors. Please update the docs and tests and add your name to the package.json file. We try to follow Airbnb's JavaScript Style Guide.
Made with contributors-img.
FAQs
[![serverless](http://public.serverless.com/badges/v3.svg)](http://www.serverless.com) [![Issues](https://img.shields.io/github/issues/agutoli/serverless-layers.svg)](https://github.com/agutoli/serverless-layers/issues) [![License](https://img.shields.io/
The npm package serverless-layers receives a total of 15,506 weekly downloads. As such, serverless-layers popularity was classified as popular.
We found that serverless-layers demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.