Security News
CISA Brings KEV Data to GitHub
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.
This gem was born out of frustration when I was dealing with assets in non-rails environment. I wanted an experience similar to asset_packager: you just specify all your assets and then in development you have them as they are, but in production all compressed in one file.
As a result I produced a small library in just around 100 lines to manage assets in any rack-based framework. For compression this gem uses yuicompressor (so you'll need java installed, as opposed to jsmin.rb but it doesn't require you to put semicolons after each statement).
Workflow is simple. You define a specification of your assets in config/assets.yml:
---
js:
- http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
- jquery.tools
- jquery.autocomplete
- jquery.address
- application
css:
- application
You can specify web and local assets. Local assets will be looked up in public/javascripts and public/stylesheets folders.
And then you use Assets.js.bundle
and Assets.css.bundle
to include assets in your view.
This gem doesn't produce compressed files on demand in production, cause such request would get slow. So instead you need to compress files when you deploy your application, just use Assets.js.compress
and Assets.css.compress
for this purpose.
You can easily change location of config file, javascripts and stylesheets folders, just look into code and you'll see how.
If you need help don't hesitate to ask me ;-)
FAQs
Unknown package
We found that brainopia-assets demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.
Security News
Opengrep forks Semgrep to preserve open source SAST in response to controversial licensing changes.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.