Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
vuepress-theme-cosmos-levi
Advanced tools
Theme for VuePress static site generator used by interchain projects.
# Remove previously installed version (optional)
rm -rf node_modules
# If there is no package.json file, initialize npm package
npm init
# Install or update the theme
npm install --save vuepress-theme-cosmos
Minimal config in .vuepress/config.js
to enable the theme:
module.exports = {
theme: "cosmos"
}
vupress dev
vuepress build
Most of the configuration happens in the .vuepress/config.js
file. All parameters all optional, except theme
.
module.exports = {
// Enable the theme
theme: "cosmos",
themeConfig: {
// Logo in the top left corner, file in .vuepress/public/
logo: "/logo.svg",
// Auto-sidebar, true by default
autoSidebar: true,
// Configure the manual sidebar
sidebar: [
// Array of sections
{
title: "Section title",
children: [
{
title: "External link",
path: "https://example.org/"
},
{
title: "Internal link",
path: "/url/path/"
},
{
title: "Directory",
path: "/path/to/directory/",
directory: true
},
{
title: "Link to ./vuepress/public/foo/index.html",
path: "/foo/",
static: true
}
]
}
]
}
}
Markdown files can contain YAML frontmatter. Several properties (all of which are optional) are used by the theme:
---
# title is displayed in the sidebar
title: Title of the file
# order specifies file's priority in the sidebar
order: 2
# parent is readme.md or index.md parent directory
parent:
title: Directory title
order: 1
---
Setting order: false
removes the item (file or directory) from the sidebar. It is, however, remains accessible by means other than the sidebar. It is valid use a readme.md
to set an order of a parent-directory and hide the file with order: false
.
FAQs
Theme for VuePress static site generator used by interchain projects.
The npm package vuepress-theme-cosmos-levi receives a total of 2 weekly downloads. As such, vuepress-theme-cosmos-levi popularity was classified as not popular.
We found that vuepress-theme-cosmos-levi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.