
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
silverstripe-cms-meta
Advanced tools
This package contains meta data about various Silverstripe CMS modules. If you need a consistent list of Silverstripe modules that you can import into a JS project, you can require this package.
Used by:
import {data as ssData} from 'silverstripe-cms-meta';
const filteredlist = ssData.filter({repo} => repo === 'silverstripe/silverstripe-framework');
const frameworkMeta = filteredlist[0];
console.dir(frameworkMeta)
The output will look something like this.
repo
is the name of the module on GitHub.name
should match the packagist name for the module, if it differs from repo.core
is for modules included in silverstripe/installer
supported
is for modules included in the CWP kitchen sink{
"repo": "silverstripe/silverstripe-framework",
"name": "silverstripe/framework",
"core": true,
"supported": true
}
Do a PR updating src/lib/data.json
.
Once the PR is merged, tag a new release in GitHub. There's a GitHub action that will automatically rebuild the package and publish it to NPM.
There's bash script in the root of the project that allows you to generate a list of packages version that will be installed for a specific release. It can be call with:
bash buildReleaseSet.bash silverstripe/recipe-kitchen-sink 4.x-dev
bash buildReleaseSet.bash silverstripe/installer 4.x-dev
This will generate a JSON file under src/lib/release-et
. From there, update src/index.ts
to import the new data.
FAQs
Some metadata about a bunch of Silverstripe CMS modules.
The npm package silverstripe-cms-meta receives a total of 19 weekly downloads. As such, silverstripe-cms-meta popularity was classified as not popular.
We found that silverstripe-cms-meta demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.