Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Yarrow is a framework for generating well structured publishing outputs from a variety of input sources.
Unlike most static site generators and code documentation tools, Yarrow is written with design and content-strategy in mind. It does not impose its own structure on your content. This makes it useful for building style guides, technical docs and complex ebooks as well as static sites and blogs.
Install the library and command line tool via RubyGems:
gem install yarrow
Or embed it in an existing Ruby project by adding the following line to the Gemfile
and running bundle
:
gem 'yarrow'
Yarrow is an extraction from several existing private documentation projects. This repo is in alpha state, which means that many of the useful features are not yet folded into this codebase. This repo is in flux as it is being used on several live projects, but lacks documentation and a unified command line tool.
Yarrow is being slowly developed as a part-time project to scratch a few itches. New features and bugfixes are pushed straight to main
, and releases of the Gem are kept more or less in sync with the planned roadmap.
A rough sketch of the project direction.
Version | Features |
---|---|
0.10 | Filename map expansion strategy |
0.11 | Directory merge expansion strategy |
0.12 | Basename merge expansion strategy |
0.13 | Resources and Assets vocabulary |
0.14 | Flatten namespaces and clean up modules |
0.15 | Web template mapping and markup generators |
0.16 | Document custom Markdown components |
0.17 | Publishing support for S3 and GitHub/Netlify |
0.18 | Clean up local web server and watcher |
MIT. See the LICENSE
file in the source distribution.
Author: Mark Rickerby me@maetl.net
FAQs
Unknown package
We found that yarrow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.