Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
middleman-blog is an extension for the Middleman static site generator that adds blog-specific functionality. This includes :
If you're just getting started, install the middleman
gem and generate a new
project:
gem install middleman
middleman init MY_PROJECT --template=blog
If you already have a Middleman project: Add gem "middleman-blog"
to your
Gemfile
and run bundle install
Within the config.rb of the middleman project, include the line
activate :blog
A more extensive guide can be found here : Middleman blogging guide it includes more detailed information on configuring and using the blog extension.
Additionally, up-to-date generated code documentation is available on RubyDoc.
Please also visit the the official Middleman community forum
Github Issues are used for managing bug reports and feature requests.
If you run into issues or have an idea; please search and then submit the ticket here
The best way to get quick responses to your issues and swift fixes to your bugs is to submit detailed bug reports, include test cases and respond to developer questions in a timely manner. Even better, if you know Ruby, you can submit Pull Requests containing Cucumber Features which describe how your feature should work or exploit the bug you are submitting.
Our internal tests are passed through Travis, testing against the following Ruby versions on Linux :
git clone https://github.com/middleman/middleman-blog.git
gem install bundler
bundle install
inside the project root to install the gem dependencies.bundle exec rake test
NB// To run an individual test use :
bundle exec cucumber features/blog_sources.feature
If you have suggestions for testing practices please submit a request.
bundle exec rake doc
Click here to lend your support to Middleman
Copyright (c) 2010-2017 Thomas Reynolds. MIT Licensed, see LICENSE for details.
FAQs
Unknown package
We found that middleman-blog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.