Setting a minimum release age (a "cooldown") on dependencies is a cheap, high-leverage defense against supply-chain attacks. Most malicious package versions are detected and yanked within hours, so a 24-hour delay filters out the smash-and-grab incidents (axios 1.14.1, ua-parser-js, Solana web3.js, etc.).
All three major Node.js package managers now support this, but each one used a different name and a different unit. Here is what you need.
| Tool | Setting | Unit | Introduced in |
|---|
See the new site: https://postgresisenough.dev
The gist aims to show settings needed to run mongo in a docker container.
Along with essential files come files needed to reproduce the case.
| version: "3.3" | |
| services: | |
| ################################################ | |
| #### Traefik Proxy Setup ##### | |
| ############################################### | |
| traefik: | |
| image: traefik:v2.0 | |
| restart: always |
| import * as jestPlugin from 'serverless-jest-plugin'; | |
| import * as mod from './../handlers/campaigns/handler'; | |
| const lambdaWrapper = jestPlugin.lambdaWrapper; | |
| const wrapped = lambdaWrapper.wrap(mod, { handler: 'campaigns' }); | |
| describe('λ: campaigns', () => { | |
| beforeAll(done => { | |
| done(); | |
| }); |
| #!/bin/sh | |
| MYSQLADMIN_CFG="/etc/mysql/mariadb.conf.d/90-mysqladmin.cnf" | |
| # generate password | |
| PASS=$(perl -e 'print map{("a".."z","A".."Z",0..9)[int(rand(62))]}(1..16)'); | |
| # adjust /etc/mysql/debian.cnf (used as defaults file by system scripts) | |
| sed -i "s/^password =.*$/password = ${PASS}/" /etc/mysql/debian.cnf | |
| sed -i "s/^user =.*$/user = debian-sys-maint/" /etc/mysql/debian.cnf | |
| # create config file for mysqladmin itself (maybe not needed) | |
| umask 066 | |
| cat > ${MYSQLADMIN_CFG} <<EOF |
| watchman watch-del-all && rm -rf node_modules/ && yarn cache clean && yarn install && yarn start -- --reset-cache |
This cheat sheet provides a detailed overview of the exposed lifecycle events and available commands (and entrypoints) of the Serverless framework, that can be hooked by plugins (internal and external ones). The document is structured by the commands invoked by the user.
Lifecycle events are shown as the globally available outer events (all providers) and sub lifecycle events that are provider specific in the called order. Currently only the AWS provider is shown. If you have information about the other provider,
FWIW: I (@rondy) am not the creator of the content shared here, which is an excerpt from Edmond Lau's book. I simply copied and pasted it from another location and saved it as a personal note, before it gained popularity on news.ycombinator.com. Unfortunately, I cannot recall the exact origin of the original source, nor was I able to find the author's name, so I am can't provide the appropriate credits.
