
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
allink-core is a heavily opinionated collection of django apps, django-cms plugins and other utilities. allink-core was implemented to create a standardized ecosystem for django-cms projects developed at allink AG.
allink-core is ment to be used with our boilerplate project which is hosted on the divio cloud. (feel free to send us a message if you would like to have a look.) The steps we describe here are mostly closely coupled to our setup and environment. So the described steps might not make sense to you, when you don't know our setup. Also we skip steps which we already included in the boilerplate.
make docs
will serve you a preview of the local docs on "http://127.0.0.1:8000". More Information on mkdocs.org or mkdocs rtd.
v.0.x.x, v.1.x.x and v.2.x.x are not compatible with each other. We never migrated from one to an other and doing so would be a be a lot of manual work, as there have been a lot of database changes. We try to minimize the need for a new major version. The decision if v3.x.x will be compatible with v.2.x.x has yet to be made.
When you make changes that affect both the backend and the frontend the project dependencies need to be updated at the same time. To quickly see which releases belong together you should make a minor
release in both repositories.
A new CMS plugin together with styles has been added to the core. Release a new minor
version:
allink-core==v2.3.0
allink-core-static@v2.3.0
Changes that only affect a single repo should be tagged with a patch
release. Usually needed for small adjustments and bugfixes.
A bugfix has been made in allink-core. Release a new patch
version:
allink-core==v2.3.2
The idea is that we want to be able to make changes to the allink-core repo with real life data. This can be achieved, when we are able to switch out the installed allink-core form the requirements.in with a local allink-core repo. This way we can also maintain a proper git history.
To work on the allink-core repo you first need to pull the allink-core repo. The setup expects it to be at "~/projects/allink-core". If it isn't in this location, just create a symlink which points to your allink-core repo.
virtualenv env
pip install -r requiremnts_dev.txt
For the next steps, we assume you are working on the boilerplate-2.0 project, but this should work with every project which follows the same principles and have allink-core installed.
- "~/projects/allink-core/allink_core:/app/allink_core:rw"
to the docker-compose.yml file.ln -s ~/projects/allink-core/allink_core allink_core
Make sure you do not commit these changes, as your teammates probably do not care about having a local allink-core mapped in their project.
Make added or updated translations with the following command:
./manage.py makemessages --symlinks
You are all set. When you now run docker-compose up
your application will run with your local allink-core repo. However if you run docker-compose build
you will still be installing the allink-core repo from the requirements file.
If you need to run docker-compose build
with your new branch. Just commit your changes to your feature branch on the allink-core repo and add it to the boilerplate-2.0 requirementsfile with the corresponding commit hash. e.g: https://github.com/allink/allink-core/tarball/ccb67deaed7dbc07bd565c717a21c0a07752bd9d
make patch
or make minor
depending on what version you want to create. (this will create a new commit and push the new tags to github) If you need an other version do it with bumpversion
.make release-test
to release in the test repository and finally use make release
(make sure you have the correct credentials for allink in your ~/.pypirc also for test-pypi)FAQs
A collection of apps used in allink cms-projects.
We found that allink-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.