Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
This branch contains a work-in-progress, exploratory, from-scratch rebuild of Lookbook, intended to form the basis of a future v3.0 release.
Demo ・ Documentation ・ Development
You can find a hosted version of the demo/test app here: https://v3-demo-app.lookbook.build/lookbook
This pulls directly from the v3
development branch and so may occasionally be broken.
v3-specific documentation is still very much a work in progress. The pages below should provide enough information if you wish to install the latest alpha release and test out some of the new features.
The Lookbook v3 codebase includes a runnable dummy/demo app for development and testing purposes.
To run the app, clone the contents of the v3
branch to your machine and then run the following commands from within the root directory:
bundle install
npm install
bin/dev
Visit http://localhost:4444/lookbook to view the Lookbook UI.
In development mode assets will be rebuilt as changes are made but there is not yet any asset live-reloading in place.
Run the tests:
bin/test
Integration tests run against the demo app.
Run the docs site locally in dev mode:
bin/docs
Visit http://localhost:4000 to view the docs. Not much to see there at the moment!
Lookbook
logs its activity to Lookbook.logger
.
This is the primary method of debugging.
You can call Lookbook.logger =
to set a custom Lookbook
logger for the process. For example:
Lookbook.logger = Rails.logger
If no custom logger is set, a default Lookbook
logger which logs to to STDERR
will be created and assigned to Lookbook.logger
.
The default logger defaults to the error
logging level (severity).
You can override the logging level by setting the environment variable LOOKBOOK_LOG_LEVEL=<level>
.
For <level>
, all standard ::Logger
levels are supported, with any mix of upper-/lower-case:
export LOOKBOOK_LOG_LEVEL=debug
export LOOKBOOK_LOG_LEVEL=info
export LOOKBOOK_LOG_LEVEL=warn
export LOOKBOOK_LOG_LEVEL=fatal
export LOOKBOOK_LOG_LEVEL=error
The default of error
will be used if an unsupported value is set.
If you want to disable Lookbook
logging, set
Lookbook.logger = ::Logger.new('/dev/null')
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that lookbook demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.