Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Spree Sort Products extends the ability of a taxon on its products to be sorted from the web interface using the drag and drop behavior.
Get the latest greatest from github:
gem 'jquery-dragsort-rails', '~> 1.0.0'
gem 'spree_sort_products' , :git => 'git://github.com/suryart/spree_sort_products.git'
Get the 2-0-stable branch for Spree 2.0.x from github:
gem 'jquery-dragsort-rails', '~> 1.0.0'
gem 'spree_sort_products' , :git => 'git://github.com/suryart/spree_sort_products.git', :branch => '2-0-stable'
Or get it from rubygems.org by mentioning the following line in your Gemfile:
gem 'jquery-dragsort-rails', '~> 1.0.0'
gem 'spree_sort_products', '2.0.0'
$ bundle install
$ rails g spree_sort_products:install
$ rake db:migrate
$ rails s
Please note that this extension uses jquery-dragsort-rails to achieve 3D sorting.
Just make sure that you have admin/taxon_tree_menu_overrides and admin/sort_products files precompiled. If it's not happening by default then please add/edit this in your config/environments/production.rb file:
Rails.application.config.assets.precompile += %w(admin/taxon_tree_menu_overrides admin/sort_products)
Be sure to bundle your dependencies and then create a dummy test app for the specs to run against.
bundle
bundle exec rake test_app
bundle exec rspec spec
When testing your applications integration with this extension you may use it's factories. Simply add this require statement to your spec_helper:
require 'spree_sort_products/factories'
The current version supports Spree 1.3.0 or above. Older versions of Spree are unlikely to work, so attempt at your own risk. Just send pull requests of patches for different versions, I will be happy to release your patch.
Copyright (c) 2013 Surya Tripathi, released under the New BSD License
FAQs
Unknown package
We found that spree_sort_products demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.