
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
zxp-builder
Advanced tools
zxp-builder is a node.js command-line interface for zxp-sign-cmd. This package makes it possible to integrate Adobe's extension signer (ZXPSignCmd) in your build process by passing on the commands via npm-scripts.
"scripts": {
"sign": "zxpbuild package --input path/to/extension --output path/to/extension.zxp --cert path/to/cert.p12 --password"
}
Note that you can leave password blank to request from user
npm install zxp-builder --save-dev
The package command generates and signs ZXP,
zxpbuild package -i path/to/dir -o path/to/dir.zxp -c path/to/cert.p12 -p
[-i, --input] [String] Directory that will be compiled into the packaged zxp file.
[-o, --output] [String] Path and filename that the zxp will be exported to.
[-c, --cert] [String] Path and filename of the .p12 certificate that will be used to sign the extension.
[-p, --password] (String) Password for P12 certificate. (Add Flag without value to request pass from user.)
(-t, --timestamp) [String] Timestamp server to be used.
The cert command creates a self signed certificate.
zxpbuild cert -c AU -s Victoria -g "My Org" -n "My Cert" -o path/to/cert.p12 -p
[-c, --country] [String] Country associated with the certificate.
[-s, --state] [String] State or province associated with the certificate.
[-g, --group] [String] The organization associated with the certificate.
[-n, --name] [String] The commonName for the certificate
[-o, --output] [String] Path that the certificate will be exported to.
[-p, --password] (String) Password for certificate. (Add Flag without value to request pass from user.)
(-l, --locality) [String] The locality for the certificate.
(-u, --unit) [String] Name of the organizational unit.
(-e, --email) [String] Email associated with the certificate.
(-d, --days) [Number] The number of days the certificate is valid.
When no value is passed with the password flag (-p, --password) the CLI will promt for the password from user.
Enjoy!
FAQs
Adobe Extension Packager
The npm package zxp-builder receives a total of 3 weekly downloads. As such, zxp-builder popularity was classified as not popular.
We found that zxp-builder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.