@cwebber What do you think of JS packages, ten years later (same day, what a coincidence)?
@cwebber What do you think of JS packages, ten years later (same day, what a coincidence)?
Package Manager for Markdown
I'm working on a project that is intended to encourage folk to make markdown text files which can be bundled together in different bundles of text files using a package manager.
Question for coders; Which package manager would you suggest I use?
Main criterias (in order) are:
1. Easy for someone with basic command line skills to edit the file and update version numbers and add additional packages.
2. All being equal, more commonly and easy to setup is preferred.
#Markdown #CommonMark #PackageManager #Programming #Dev
#NPM #RubyGems #Cargo #PickingAMastodonInstance
#Ruby #Python #Rust #Javascript #NodeJs #Lisp #CommonGuide
OF LIMBO Share Homage To Van Halen With "Finish What Ya Started"
OF LIMBO are sharing a fun new homage to Van Halen with their acoustic version of the classic “Finish What Ya Started”. It’s the 2nd release from the California band off their upcoming “Unplugged” album, which will be released this summer.
Recorded at the band’s home studio in Long Beach, their...
https://comiccrusaders.com/editorial/of-limbo-share-homage-to-van-halen-with-finish-what-ya-started/
#of limbo #rock #music #npm pr
In today's Supply Chain News ...
Eleven oooold npm packages were hijacked to steal API keys. Wonder how many of them jise are just sitting on n someone's built pipeline with "latest" as the version parameter?
https://www.sonatype.com/blog/multiple-crypto-packages-hijacked-turned-into-info-stealers
h/t to SonaType for the top notch research.
#Infostealer campaign compromises 10 #npm packages, targets devs
@henry Having (almost fully) switched to #NodeJS in 2012, I quickly recognized the danger of relying to _anything_ (#npm included, this one gave me a lot of pain for several times over the years).
Ended up with a monstrous monorepo. Forked (and improved) just 2 other people's repos, one abandoned and one that took months to finally get it right regarding garbage collection, but I had no time to wait.
Thereby I never got to a situation to hate a programming language because of the hype around it, but it surely got me coding a ton of #javascript.
The experience helped me a lot in JS5=>ECMAScript and ECMAScript=>TypeScript switching in the last year or so.
New #npm attack poisons local packages with backdoors
https://www.bleepingcomputer.com/news/security/new-npm-attack-poisons-local-packages-with-backdoors/
Ok, normal patterns after an hour of excitement.
ReversingLabs has a good writeup of an npm package infected with malware that generates a backdoor. Great way to get insight into the patterns the baddies follow.
https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell
#security vulnerability on #npm packages
https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell
#NPM: Two malicious packages were discovered on npm (#NodeJS package manager) that covertly patch legitimate, locally installed packages to inject a persistent reverse shell backdoor:
#SoftwareSupplyChainSecurity
https://www.bleepingcomputer.com/news/security/new-npm-attack-poisons-local-packages-with-backdoors/
@BleepingComputer Do we think something like this is enough to find if this garbage is present on a Linux system? `sudo find / -iregex '.*ethers-.*`
#node #npm #malware
#WebDev #JavaScript #TypeScript #frontend #npm
Meet dd<el> — JS lib for building #reactiveUIs with syntax close to native DOM!
See https://fosstodon.org/@jaandrle/114216488004115032 or https://github.com/jaandrle/deka-dom-el … share or use star if u like it
Newpeak Metals ( #NPM ) has released " Appointment of Chief Executive Officer " on Tue 25 Mar at 08:20 AEST #Mining #Gold #Australia #media #Strategy
https://grafa.com/asset/newpeak-metals-ltd-8715-npm.asx?utm_source=asxmktsensitive&utm_medium=mastodon&utm_campaign=npm.asx
Out of pure curiosity, and because I'm on that #webdev #framework discovery tip. Heck, this project even made me download an IDE for Android lol
Just to read `install.bin` - which is an sh script.
Excuse me, but why are you bundling #nodejs and #npm? Is it to facilitate a setup process for containers, or is it merely to make the process easy?
I'm a bit sceptical to that sort of thing, especially when fetching from a vendors domain directly.
Any plans to build packages via CI?
“Vanilla JavaScript for flavouring, a full-fledged feast for large projects.”
Meet dd<el> – the Vanilla JavaScript library for building reactive UIs with syntax close to native DOM! No build step required, just native DOM with superpowers. #ReactiveUI based on signals and events.
- NPM: https://www.npmjs.com/package/deka-dom-el
- GitHub: https://github.com/jaandrle/deka-dom-el (use star if u like it)
- Docs & examples: https://jaandrle.github.io/deka-dom-el
Last week's most downloaded npm packages:
1. semver
2. ansi-styles
3. debug
4. supports-color
5. chalk
6. minimatch
7. ms
8. tslib
9. strip-ansi
10. has-flag
Quick question for the node.js developers on the fediverse.
How would I go about monitoring an app's memory and CPU usage over time?