
Security News
NIST Under Federal Audit for NVD Processing Backlog and Delays
As vulnerability data bottlenecks grow, the federal government is formally investigating NIST’s handling of the National Vulnerability Database.
You can find the documentation and downloads on the project website.
If you're looking to get an old version of the library, you can build off the associated tag. We very strongly recommend you use the latest version. If you run into a bug on the latest version, report it on the issue tracker. We'll try to fix the bug as soon as possible, and we'll give you a snapshot build that includes the fix for you to use until the next official bugfix release.
Please refer to CONTRIBUTING.md.
Install npm
and gulp
. Of course, npm install
before using gulp
.
Run gulp
in the console. The main targets are:
Building:
build
: build the libraryzip
: build the release ZIPclean
: clean the build
directorydist
: update the distribution JS for npm, bower, etc.File references:
refs
: update all refstestrefs
: update JS lib file refs in the tests pagetestlist
: update list of test JS files in tests pageTesting:
test
: run the Mocha unit testslint
: lint the JS sources via jshintwatch
: update JS refs in HTML files (debug page, test page) automatically when JS files are added or deletedDocumentation:
docs
: build the documentation templatedocsmin
: build the documentation template with all resources minifieddocspub
: build the documentation for publishing (ZIPs, JS refs, etc.)docspush
: push the built documentation to productionVERSION
environment variable, e.g. export VERSION=1.2.3
VERSION
is picked up by gulp: gulp version
gulp lint
gulp test
gulp publish
Mocha tests are found in the test directory. The tests can be run in the browser or they can be run via Node.js (gulp test
).
FAQs
Concise and readable multitasking
The npm package weaverjs receives a total of 2,898 weekly downloads. As such, weaverjs popularity was classified as popular.
We found that weaverjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
As vulnerability data bottlenecks grow, the federal government is formally investigating NIST’s handling of the National Vulnerability Database.
Research
Security News
Socket’s Threat Research Team has uncovered 60 npm packages using post-install scripts to silently exfiltrate hostnames, IP addresses, DNS servers, and user directories to a Discord-controlled endpoint.
Security News
TypeScript Native Previews offers a 10x faster Go-based compiler, now available on npm for public testing with early editor and language support.