Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Sumor Command Line Tool.
A Sumor Cloud Tool.
More Documentation
npm install -D sumor
Now, you can use the sumor
command to use the builder tool.
Quickly initialize the project, generate sample programs and test cases, as well as build configuration files.
sumor init
It will check the code style and code format. and it will generate a report into output/lint
folder.
sumor lint
sumor lint --fix
It will run the unit test cases which are under test
folder and suffix with .test.js
.
Then generate an unit test report into output/unit
folder. A coverage report into output/coverage
folder.
sumor test
Aim to package the library into a single file, and prepare files for publishing to NPM.
It will copy static
folder into output folder.
It will package the library into output folder. By default, package entry is src/index.js
.
output folder is output/production
.
sumor build
output folder is output/development
.
sumor build --mode=development
As NPM library should have name and description in package.json. And README file should have the same content as package.json. It will automatically generate full README.md file into output folder.
You need to specify the name and description in package.json.
Then specify the document into README.md
.
And License info into LICENSE.md
, if no license file, it will load from package.json.
It will generate a license report into output/license.md
.
sumor license
Publish the library to the public repository
sumor publish <version>
Publish the beta version
sumor publish <version> -b
Publish the library to the private repository
sumor publish <version> -r <registry> -u <username> -p <password>
Clean the dependencies, in case of some dependencies expired.
sumor clean
Specify scope which will be cleaned, example: @sumor-cloud
sumor clean --scope @sumor-cloud
You can use this tool for free.
But we are a commercial company, to ensure stability, we currently don't offer a joint contribution mechanism.
You can report issues through Report Library Issue Ticket, and we will fix them as soon as possible.
In consideration of the chaotic situation in the open source community, we provide obfuscated code for use and security analysis.
However, we do not provide the source code in its original form in order to protect the ongoing maintenance and creative interests and motivations.
The released code in NPMJS is based on MIT. The source code is closed-source.
Our tools are free to use in order to help build cloud applications more efficiently. Our commercial purpose is to improve the ecosystem of business websites.
If there are any innovations that greatly benefit the open source community, it will be separated and contributed to the open source community.
FAQs
Unknown package
The npm package sumor receives a total of 1 weekly downloads. As such, sumor popularity was classified as not popular.
We found that sumor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.