
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Sully is a "WVC" (Whatever View Controller) framework. We make no assumptions about your data layer, whilst providing a structure for logic and templating.
Getting started
$ npm i sully -g
Because the tool is only for creating and building projects, it's appropriate and more convenient to install it globally.
Creating a new project
$ sully new <project-name> <template>
The new command will pull a project template and extract it and ensure you are all ready to go. We recommend using "starter" (without the quotes) as your template; however, you can pop any url in here which points to a Sully template (zipped).
Building a project
$ sully build
The build command will compile your controllers, middleware, views, and routes. It will build a development and a production version, which will both be written to your specified locations in build.json.
The autobuilder
$ sully autobuilder <path>
The autobuilder will listen for changes and perform automatic builds. The path parameter is option, and will tell the autobuilder to listen for changes only in the specified file or directory. If no path is specified, the autobuilder will listen for changes in all files.
Dev server
$ sully serve <port>
Sully will spin up a local Express server on your machine. The port parameter is option and must be an integer. If no port is provided, the server will listen on 3000.
Releases
$ sully release
Create a release as per the details provided in your build.json.
For all things Sully: sullyjs.org
FAQs
The official CLI for Sully.js.
The npm package sully receives a total of 1 weekly downloads. As such, sully popularity was classified as not popular.
We found that sully demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.