
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
staticbuild
Advanced tools
A static website generator and development server for Pug (aka Jade) and/or Nunjucks templates. Useable with Gulp, Grunt or other build automation.
Run
npm install -g staticbuild
Then, to setup a new project in the specified path:
staticbuild setup [path]
Output
Setting up basic site template....
Done.
When ready, please run: npm install && bower install
To view the site during development: npm run dev
To generate the site for production: gulp
(The path argument is optional and defaults to the current directory.)
Run
npm install --save-dev staticbuild
In the package.json
file for your project, add one of the following and then
run it with npm run dev
. Look at the demo
projects for more details.
"scripts": {
"dev": "staticbuild dev ."
}
or
"scripts": {
"dev": "staticbuild dev path/to/staticbuild.json"
}
Look in the demo code to see a typical setup.
The following open source sites are also using StaticBuild:
See demo/jade
for an example. Run npm install
in the demo and then
npm run dev
.
The project directory should contain a staticbuild.json
configuration file
or be organized according to the default configuration. A project directory
organized according to the default-staticbuild.json configuration looks like
this:
/path/to/project
- locales/...
- src/...
- [staticbuild.json]
The src/
directory is the root of the site which can contain static
.html
, .js
and .css
files as well as .jade
, .less
and/or nunjucks
(.htm
) files.
The locales/
directory is used by
i18n-node
to store json files which are created automatically during development when
using the staticbuild.translate
or translateNumeric
function.
Configuration is primarly read from a JSON file, named staticbuild.json
by
default.
Look at the demo
projects and the main index.js
for more information.
The default command right now is to just run the development server. That may change in the future and more commands will be added to generate files like a gulp or grunt file.
staticbuild v0.12.4 - A static website generator and development server.
Usage:
staticbuild [command] [options]
Commands:
dev Run the development web server.
setup Setup a new project.
Options:
-v, --version Show version number. [boolean]
-h, --help Show help. [boolean]
-V, --verbose Enables verbose output. [count]
staticbuild v0.12.4 - Development server.
Runs a local http server to dynamically render static content during development.
Usage:
staticbuild dev [options] <path>
Required:
path Path to a staticbuild.json file or directory to find one.
If no path is supplied, the current directory is used.
Options:
-v, --version Show version number. [boolean]
-h, --help, --help Show help. [boolean]
-b, --bundling Enable bundling. [boolean] [default: false]
-r, --restart Number of seconds to delay nodemon restarts. [number] [default: 1]
--no-restart Disables the built-in nodemon server restart.
-V, --verbose Enables verbose output. [count]
At the time of this writing, this command simply creates a default
staticbuild.json
file.
staticbuild v0.12.4 - Setup.
Interactive setup to create a new project.
Usage:
staticbuild setup [options] [path]
Options:
-v, --version Show version number. [boolean]
-h, --help, --help Show help. [boolean]
-V, --verbose Enables verbose output. [count]
See http://staticbuild.github.io/api/
Any view engine can be plugged into staticbuild eventually. Pug (previously known as Jade) was initially used since it is the authors preference for emitting HTML.
Nunjucks was chosen as the first alternate to Jade since it can use templates to emit any type of text-based file format, not just HTML. This can be very useful for generating other types of fixtures for your static website such as markdown files, JSON, XML and so on.
FAQs
A static website generator and development server.
The npm package staticbuild receives a total of 0 weekly downloads. As such, staticbuild popularity was classified as not popular.
We found that staticbuild demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.