
Security News
NIST Officially Stops Enriching Most CVEs as Vulnerability Volume Skyrockets
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.
victory-docs
Advanced tools
Documentation site for victory. victory-docs is running on react-static.
To install and run the docs site locally:
yarn install
yarn start
Note that paths in local development are based on a root of "/" but be careful when defining relative and absolute paths inline or doing url parsing, as the production output root will be "open-source/victory."
To build the staging build output and serve it with the canonical path it'll have when built as a lander for formidable.com:
#builds and serves staging content at localhost:3000/open-source/victory
yarn stage-and-serve
# Runs integration smoke tests and generates screenshots for human sanity-checking
yarn test-local
This step is important for validating that both the basePath used by the static HTML output and the basename used
by the client-side router are working as expected. This is also where you'll want to validate that there are no hardcoded,
inlined, or malformed asset paths that worked locally but will not resolve correctly in production!
To publish to NPM run
This package must be published with npm@5.6.0
npm version <newversion | major | minor | patch> (see Versioning notes below)
git push origin master && git push --tags
npm publish
OSS landers are deployed by the formidable.com package, see DEPLOYMENT.md or lib/actions.js there for how
the build output is consumed.
For a reliable systems of releases, victory-docs should aim for versioning along these lines:
FAQs
Documentation site for Victory by Formidable
The npm package victory-docs receives a total of 73 weekly downloads. As such, victory-docs popularity was classified as not popular.
We found that victory-docs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 36 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.