
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
sprinter-dash
Advanced tools
|
This is a web dashboard for sprinter with client-side filters. |
Sprinter Dash is a web frontend for viewing issues from multiple GitHub issue trackers on one view. It provides views for:
Once issues are loaded on the client, they can be filtered locally by:

You must provide GitHub credentials to run SprinterDash. They can be provided as environment variables: GH_USERNAME, GH_PASSWORD. In this case, they are picked up automatically and used. Or you can specify them in the SprinterDash constructor if attaching to an existing Express application (see below).
For this example to work, simply clone this repo and set the following environment variables: GH_USERNAME, GH_PASSWORD. Then run:
npm install .
node index.js
This will start a server monitoring a couple of default repositories.
You can specify what repositories to gather issues from with a comma-delimited list of repository slugs. Specified repositories must have GitHub Issues enabled.
node index.js org1/repo1,org1/repo2,org2/repo3
You can create an instance of SprinterDash and attach it to an existing Express application. This is how it is used at http://status.numenta.org/issues.
var SprinterDash = require('sprinter-dash');
var dash = new SprinterDash({
repos: ['org1/repo1', 'org1/repo2']
, ghUsername: <GITHUB USERNAME>
, ghPassword: <GITHUB PASSWORD OR AUTH TOKEN>
});
var app = express();
dash.attach(app, 'dashboard');
app.listen(8080);
SprinterDash will be running on http://localhost:8080/dashboard. The following views are available, where <url-prefix> is dashboard in the above example:
/<url-prefix>/issues will display all issues within the past 2 months with a filter bar./<url-prefix>/issues/:login will display issues assigned to the user specified by :login, as well as issues mentioning the same user./<url-prefix>/priority will display issues in priority order if you have P1, P2, P3, & P4 labels.When using the attach() function, SprinterDash will set up the following data routes that you can call from your application's front-end:
/<url-prefix>/_issues: returns all issues updated within 2 months/<url-prefix>/_recentIssues: returns all issues updated within 2 days/<url-prefix>/_oldIssues: returns all issues over 6 months old/<url-prefix>/_staleIssues: returns all issues updated over 2 months agoThese URLs will return JSON issue data.
/<url-prefix>/client/templates/issues.html is the location of the Handlebars template used to render issues client-side. You can re-use this to provide the SprinterDash view in any page of your website (as shown in http://status.numenta.org/).
The <url-prefix> defaults to dash, but can be specified by passing a the urlPrefix parameter to attach() as shown in the example above.
If you pass a travisOrg into SprinterDash, Travis-CI builds will be shown when running in the issue table.
var dash = new SprinterDash({
repos: ['org1/repo1', 'org1/repo2']
, travisOrg: 'rhyolight' // GitHub org or username
, ghUsername: <GITHUB USERNAME>
, ghPassword: <GITHUB PASSWORD OR AUTH TOKEN>
});

FAQs
GitHub Issues Dashboard for multiple repositories.
The npm package sprinter-dash receives a total of 39 weekly downloads. As such, sprinter-dash popularity was classified as not popular.
We found that sprinter-dash demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.