
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
tb-i18n-loader
Advanced tools
mkdir config && touch config/default.json
{
"LANGUAGES": ["zh", "zh_tw", "en", "ja", "ko"],
// use for gulp notice
"TOKEN": "Your Teambition AccessToken",
"TASKLIST_ID": "5809ebecad0e08685f6e49a8",
"TEAM_ID": "5763667798cb0609458bacdd"
}
Translate keys to register locales in tb-i18n
var i18n = require("locales.i18n?languages[]=en&languages[]=zh&descriptionAs=zh");
// register locales to i18n and return i18n object
Translate from
@namespace: example
{
"key1": "description1",
"key2": "description2",
"key3": "description3"
}
to
var i18n = require('tb-i18n');
i18n.setLocales('en', {
"example.key1": "en.value1",
"example.key2": "en.value2",
"example.key3": "en.value3"
})
i18n.setLocales('zh', {
"example.key1": "zh.value1",
"example.key2": "zh.value2",
"example.key3": "zh.value3"
})
The string array of languages those to register.
Set the desciption as default value of the specified language.
Set the namespace at the first line!!!
export ONESKY_SECRET='OneSky Secret'
export ONESKY_API_KEY='OneSky ApiKey'
export TRANSLATE_KEY='Baidu Translate Key'
调用百度翻译 API 翻译 /locales/zh.json
并覆盖 /locales/zh_tw.json
将当前 简体中文 文档缓存(可省,但需保证 cache 内文档与 最新文档 不同)
$ gulp cache
下载 最新文档 并比对与 cache 下版本的不同
$ gulp download
翻译 - 参数:-a | --all
全量翻译; -f | --force
不执行 确认修改 直接覆盖
$ gulp chs-to-cht
上传
$ gulp post-cht
可以尝试 --queriesPerSecond [qps]
选项,如:
$ gulp chs-to-cht --queriesPerSecond 0.6
指定了我们以 0.6 qps 为请求频率使用百度翻译服务,即:约 1.7秒 发一个请求。关于百度服务的层级,相关信息见:(链接1,链接2)
FAQs
Webpack loader for teambition i18n
The npm package tb-i18n-loader receives a total of 49 weekly downloads. As such, tb-i18n-loader popularity was classified as not popular.
We found that tb-i18n-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.