
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
Spending hours in the rails console? Spruce it up and show off those hard-working hands!
jazz_hands is an opinionated set of console-related gems and a bit of glue:
show-routes
,
show-models
, show-middleware
) in the Rails console.Ruby 1.9.2+, Rails 3 or 4 only. Add to your project Gemfile:
group :development, :test do
gem 'jazz_hands'
end
That's it. Run rails console
as usual.
Hirb isn't enabled by default. To use, run Hirb.enable
in the console.
Ruby compiled against a proper readline library, ideally GNU readline, is
recommended. Alternatively, gem install rb-readline
for an
acceptible backup. Using ruby compiled against a libedit
wrapper (primarily OS
X) will work but is not recommended.
Change the following options by creating an initializer in your Rails project
Example config/initializers/jazz_hands.rb
:
if defined?(JazzHands)
JazzHands.colored_prompt = false
JazzHands.enable_syntax_highlighting_as_you_type!
end
colored_prompt
Color the console prompt? Defaults to true
when the current ruby is compiled
against GNU readline or rb-readline
, which don't have issues counting
characters in colored prompts. false
for libedit.
Note: Pry.color = false
trumps this setting and disables all console coloring.
prompt_separator
Separator string between the application name and line input. Defaults to »
for GNU readline or libedit. Defaults to >
for rb-readline
which fails on
mixed encodings.
Syntax highlighting as you type via Coolline and Coderay
is disabled by default due to slightly buggy behavior. To enable, add
JazzHands.enable_syntax_highlighting_as_you_type!
to the initializer. Only
works with MRI 1.9.3 or 2.0.0.
Patches and bug reports are welcome. Just send a pull request or file an issue. Project changelog.
FAQs
Unknown package
We found that jazz_hands demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.