Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
A set of tasks for Shipit used for npm specific tasks on deploy.
Inspired by the capistrano/composer extension.
Features:
updated
or fetched
event from shipit-deploynpm install shipit-npm
Just simply run: (This triggers the npm
task on the deploy updated
or fetched
event. No additional config necessary.)
shipit staging deploy
Or you can run the tasks separatly :
shipit staging npm:init npm:install
shipit staging npm:run --cmd "update"
shipit.config.npm
npm.remote
Type: Boolean
Default: true
A Boolean to determine whether to run the task in local workspace or on the remote.
npm.installArgs
Type: Array
or String
Default: []
An array or string specifying npm args passed to the npm install cmd.
npm.installFlags
Type: Array
or String
Default: []
An array or string specifying npm flags passed to the npm install cmd.
npm.triggerEvent
Type: String
,Boolean
Default: updated
or fetched
(depending on npm.remote
value)
An event name that triggers npm:install
. Can be set to false to prevent the npm:install
task from listening to any events.
shipitfile.js
options usagemodule.exports = function (shipit) {
require('shipit-deploy')(shipit);
require('shipit-npm')(shipit);
shipit.initConfig({
default: {
npm: {
remote: false,
installArgs: ['gulp'],
installFlags: ['-g']
}
}
});
};
npm.installArgs
or Flags npm.installFlags
defined in options)updated
or fetched
event from shipit-deploy or by a custom npm.triggerEvent
as mentioned above.)MIT
FAQs
Npm tasks for shipit.
The npm package shipit-npm receives a total of 148 weekly downloads. As such, shipit-npm popularity was classified as not popular.
We found that shipit-npm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.