Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Generamba is a code generator made for working with Xcode. Primarily it is designed to generate VIPER modules but it is quite easy to customize it for generation of any other classes (both in Objective-C and Swift).
We keep evolving Generamba:
Besides, we started working on 2.0 version with powerful DSL and plugins. Check the release roadmap!
generamba gen [MODULE_NAME] [TEMPLATE_NAME]
. You do not need to input a bunch of data each time because each project corresponds to only one configuration file that holds standard file system and Xcode-project pathes, names of targets, information about the author.Ruby 2.2 or later version is required. To check your current Ruby version run this command in terminal:
$ ruby --version
When necessary you can install the required Ruby version with the help of rvm
or rbenv
.
Run the command gem install generamba
.
generamba setup
in the project root folder. This command helps to create Rambafile that define all configuration needed to generate code. You can modify this file directly in future.{name: 'rviper_controller'}
.generamba template install
. All the templates will be placed in the '/Templates' folder of your current project.generamba gen [MODULE_NAME] [TEMPLATE_NAME]
- It creates module with specific name from specific template.Run generamba help
to learn more about each of the Generamba features.
Wiki:
Other materials:
MIT
FAQs
Unknown package
We found that generamba-udf demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.