Gaston Sanchez gaastonsr

Getting Started with NPM (as a developer)

As easy as 1, 2, 3!

Updated:

Aug, 08, 2022 update config docs for npm 8+
Jul 27, 2021 add private scopes
Jul 22, 2021 add dist tags
Jun 20, 2021 update for --access=public
Sep 07, 2020 update docs for npm version

#Introduction If you're a php developer on ubuntu, there comes the time where you have to install/reinstall your system. I did it already a few times and i decided to write down the steps for a typical web developer stack with php. This is for a developer machine and not for a live environment!

I hope it helps you too!

fyi @mheiniger and me started with an installer here: https://github.com/mheiniger/webdev-setup

tl;dr

Don't run as root.
For sessions, set httpOnly (and secure to true if running over SSL) when setting cookies.
Use the Helmet for secure headers: https://github.com/evilpacket/helmet
Enable csrf for preventing Cross-Site Request Forgery: http://expressjs.com/api.html#csrf
Don't use the deprecated bodyParser() and only use multipart explicitly. To avoid multiparts vulnerability to 'temp file' bloat, use the defer property and pipe() the multipart upload stream to the intended destination.

Better local require() paths for Node.js

Problem

When the directory structure of your Node.js application (not library!) has some depth, you end up with a lot of annoying relative paths in your require calls like:

const Article = require('../../../../app/models/article');

Those suck for maintenance and they're ugly.

Possible solutions

How to use terminal on Windows without going crazy…

Windows is really horrible system for developers and especially for devops. It doesn’t even have a usable terminal and shell, so working with command line is really pain in the ass. If you really don’t want to switch to any usable system (OS X, Linux, BSD…), then this guide should help you to setup somewhat reasonable environment – usable terminal, proper shell, ssh client, git and Sublime Text as a default editor for shell.

Install stuff

Download and install Git for Windows* with:
- [✘] Use Git from the Windows Command Prompt

[✘] Checkout as-is, commit Unix-style line endings

	<!DOCTYPE html>
	<meta charset=utf-8>
	<meta name=viewport content="width=device-width, initial-scale=1, maximum-scale=1">
	<meta name=apple-mobile-web-app-capable content=yes>
	<meta name=apple-mobile-web-app-status-bar-style content=black>
	<title>Test fullscreen</title>
	<style>
	html, body {
	margin: 0;
	padding: 0;

	# First install tmux
	brew install tmux

	# For mouse support (for switching panes and windows)
	# Only needed if you are using Terminal.app (iTerm has mouse support)
	Install http://www.culater.net/software/SIMBL/SIMBL.php
	Then install https://bitheap.org/mouseterm/

	# More on mouse support http://floriancrouzat.net/2010/07/run-tmux-with-mouse-support-in-mac-os-x-terminal-app/

	/**
	* Hide the addressbar on ios & android devices
	* https://gist.github.com/yckart/5609969
	*
	* Based on the work from Nate Smith
	* @see https://gist.github.com/nateps/1172490
	*
	* Copyright (c) 2013 Yannick Albert (http://yckart.com)
	* Licensed under the MIT license (http://www.opensource.org/licenses/mit-license.php).
	* 2013/07/10

	# Hello, and welcome to makefile basics.
	#
	# You will learn why `make` is so great, and why, despite its "weird" syntax,
	# it is actually a highly expressive, efficient, and powerful way to build
	# programs.
	#
	# Once you're done here, go to
	# http://www.gnu.org/software/make/manual/make.html
	# to learn SOOOO much more.

	var my_element = document.getElementById('my-element');
	//-- Returns true/false
	my_element.isVisible(my_element);