Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Custom recipes that extend capistrano for provisioning and deploying rails application to a VPS..
This gem originates from Railscasts (Ryan Bates) excellent series of screencasts on deployment.. I suggest you should check it out..
Add this line to your application's Gemfile:
gem 'debot'
And then execute:
$ bundle
Or install it yourself as:
$ gem install debot
$ capify .
Next generate the stages and deploy files by typing:
$ rake debot:setup
NB: You need to require debot in you deploy.rb file, this if you don't want debot to generate the stages and deploy files for you.
For a detailed list of all the the task availble:
$ cap -vT
To provision an ubuntu based VPS:
$ cap debot:install
To setup your application/website:
$ cap deploy:setup
NB: this will setup your postgres database, nginx and unicorn config for the application.
If you need to work on a bug in production first:
$ cap go:down
And then after the bug is fixed:
$ cap go:live
If you need to undo the application setup (i.e nginx, unicorn and postgres) configs
$ cap debot:takedown
##Version
0.0.1.alpha
(I am just pouring out ideas on this gem, as i use it on multiple projects. it is under constant development. You are welcome to contribute, try it out and give feeback)
git checkout -b my-new-feature
)git commit -am 'Added some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that debot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.