Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
templated-npm
Advanced tools
You can copy/link automatically all your common config files of all your projects from a template directory. You can config to copy parts of files that is common in different projects. It's util for common config files/parts for all subprojects/microservices like .gitignore, copyright, etc.
Add the dependency:
npm install templated-npm --save-dependency
You must create a "templated.json" file with your templated reposiotory source configured:
{
"source": "../templated-example-template2"
}
Or you can indicate multiple sources with an array:
{
"sources": [
"../templated-example-template"
"../templated-example-template2"
]
}
All files in the templated repository was copied to your project automatically.
If you want to embed a part of file you can create in your templated repository a file with the name: file-name-when-you-want-embed|embed-tag.part
For example:
readme.md|copyright.part
The "content part" was replaced in your file with the position of the embed-tag indicated. You must indicate in your file where you want put the content with your embed tag. In a .md/.html file it is with:
<!-- start|embed-tag --> it was replaced <!-- end|embed-tag -->
For example:
<!-- start|copyright --> it was replaced <!-- end|copyright -->
If you want put in de start or de end of the file you don't need define the embed tag position. Simply use files with tag "start" or "end" like:
readme.md|start.part
readme.md|end.part
You can view an example of use in: https://github.com/miyoda/templated-example-usage.git
The example use the template: https://github.com/miyoda/templated-example-template.git
FAQs
Automatically copy common files or part of files between projects
The npm package templated-npm receives a total of 0 weekly downloads. As such, templated-npm popularity was classified as not popular.
We found that templated-npm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.