Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
The quickest CLI tool to setup a new WordPress locally. Wordless ready.
This is a ruby-gem, so we expect you have already installed ruby, since it is there by default on Mac and Linux; if it isn't the case, probably you'll like to take a look to rbenv.
The only prerequisite that's up to you is to have the right version of node installed. Refer to https://wordless.readthedocs.io/en/latest/_pages/stack/node.html#node for the documentation.
The gem will try to nvm use
into the theme during the process. If it won't work, it will fallback using global
node version. If your global available node version won't match the required one, then the
process will fail due to yarn
compelling about version mismatch.
gem install wordless
wordless help
Tasks:
wordless help [TASK] # Describe available tasks or one specific task
wordless new <NAME> # Download WordPress in specified directory, install the Wordless plugin and create a Wordless theme
Create a new Wordless-enabled WordPress site in directory NAME
. This downloads the latest stable release of WordPress (you can also specify a locale):
wordless new mysite
> wordless help new
Usage:
wordless new <NAME>
Options:
[--force] # Overwrite existing WP-CLI / WP-CLI Server installation
-l, [--locale=LOCALE] # WordPress locale
# Default: en_US
-b, [--bare=BARE] # Remove default themes and plugins
# Default: true
[--admin-user=ADMIN_USER] # WordPress admin user
# Default: admin
[--admin-email=ADMIN_EMAIL] # WordPress admin email
# Default: admin@example.com
[--admin-password=ADMIN_PASSWORD] # WordPress admin password
# Default: password
[--db-user=DB_USER] # MySQL database user
# Default: root
[--db-password=DB_PASSWORD] # MySQL database pasword
[--site-url=SITE_URL] # Wordpress site URL
# Default: http://localhost:8080
This command will:
A super short video to understand how much time a new development WordPress site should require to be up and running.
--db-password=
option if you have oneIf you are still working with an old Wordless theme and you need the ruby-releated features
of the wordless
gem, you need to install the last version 1.x version released
gem uninstall wordless
gem install wordless -v '1.1.6'
and you can read the old README here
bundle install && ./bin/setup.sh && rspec
We've noticed problems running tests while using rvm
; all of them solved using rbenv
.
We have some clues about the problem, but we are ignoring it at the moment. We have switched
the CI tool to sempaphore, which use rbenv, so pull requests will be tested in a working
environement.
Visit Wordpress Tools.
git checkout -b my-new-feature
)git commit -am 'Added some feature'
)git push origin my-new-feature
)made with ❤️ and ☕️ by weLaika
(The MIT License)
Copyright © 2012-2019 weLaika
FAQs
Unknown package
We found that wordless demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.