Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
=About
Assets compression (javascript and css) for rails applications. Instead of sending down a dozen javascript and css files full of formatting and comments, this gem makes it simple to merge and compress these assets down into one or more files, increasing speed and saving bandwidth.
When in development, it allows you to use your original versions and retain formatting and comments for readability and debugging.
This gem was inspired by AssetPackager from Scott Becker, but is a complete rewrite and much more powerful.
==Features
==Install
Simply install it as any other gem:
gem install assets_booster
Or when using bundler, add it got your Gemfile:
gem assets_booster
==Quick Start
If you dont't have a configuration file yet, you can easily have one created using this command:
rake assets_booster:setup
To compile the assets (normally done before deployment):
rake assets_booster:compile
To get the packaged assets served simply replace your existing javascript_include_tag, stylesheet_link_tag in your views with:
assets_booster_tag(:javascript, "base") assets_booster_tag(:stylesheet, "base", :media => "screen, projection")
==Contributing
If you'd like to contribute a feature or bugfix: Thanks! To make sure your fix/feature has a high chance of being included, please read the following guidelines:
==Copyright
Copyright (c) 2011 {Corin Langosch}[http://www.corinlangosch.com]. Released unter the MIT license.
FAQs
Unknown package
We found that assets_booster demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.