
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
JS minifier for Lektor that automatically minifies javascript files
Uses rjsmin and looks for .js files, minifying them as part of the build process. It only rebuilds when it's needed (file changed or the config changed). When starting the the development server it watchs the files for changes in the background and rebuilds them when needed.
You can install the plugin with Lektor's installer::
lektor plugins add lektor-jsminify
Or by hand, adding the plugin to the packages section in your lektorproject file::
[packages]
lektor-jsminify = 1.4.1
To enable jsminify, pass the jsminify
flag when starting the development
server or when running a build:
lektor server -f jsminify
lektor build -f jsminify
When the flag is present, jsminify will take all .js files from asset_sources/js, minifies them and places them in assets/js.
The Plugin has the following settings you can adjust to your needs:
parameter | default value | description |
---|---|---|
source_dir | asset_sources/js/ | the directory in which the plugin searchs for js files (subdirectories are included) |
output_dir | assets/js/ | the directory the minified js files get place at |
name_prefix | prefix for output name e.g. test.js becomes to test<name_prefix>.js | |
keep_bang_comments | False | keep comments starting with an exclamation mark |
excluded_assets | exclude .js files using a comma separated list of unix shell style wildcards (fnmatch) | |
included_assets | include .js files using a comma separated list of unix shell style wildcards (fnmatch) overrides excluded assets |
An example config can be found at configs/jscompile.ini
FAQs
JS minifier for Lektor. Based on rjsmin.
We found that lektor-jsminify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.