Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
simple-aznpmrcs
Advanced tools
Every 30/60/90 days the PAT was expired that was used for installing NPM dependencies.
Which meant I needed to login, create a new PAT, covert it to base64, update NPMRC and then I was able to proceed.
If you only have one Azure DevOps organization then it is not handy but doable.
I use multiple and therefor needed to login to each of the different Organizations and do the update circus.
And ofcourse, that was always when you can cannot really use it >.<
So in comes this module!
It can create NPMRC' based on the given aZOrganization
, azProject
and feedname
A PAT is generate automatically and you can update it with ease.
As this is automated, there is no need to have very long lived PAT's. You can use shortlived because well its easy to regenerate.
It uses the Azure CLI to connect.
You need to make sure that you have this installed, and are logged in (az login
)
After that you are good to go :-)
You can either install it globally npm install -g simple-aznpmrcs
or use npx npx simple-aznpmrcs
to execute the commands.
For creating a NPMRC a few parameters are required:
Note: azOrganization & azProject are optional if repository url is provided in your package.json
Example Azure DevOps url: https://dev.azure.com/henkvandenbrink/kitchensink
azOrganization = henkvandenbrink
azProject = kitchensink
feedName = As created.
Example:
npx simple-aznpmrcs create henkvandenbrink kitchensink npm-feed
When you have create one or more npmrcs you can easily switch:
npx simple-aznpmrcs example-npmrc
For updating you only need to provide the name of the NPMRC that was created earlier.
npx simple-aznpmrcs update example-npmrc
This module uses npmrc npm module to create and switch the npmrc.
FAQs
CLI to help with setting up feeds and authentication for Azure DevOps
We found that simple-aznpmrcs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.