
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@hideoo/create-app
Advanced tools
CLI utility to bootstrap a new project by creating a new app from scratch or update an existing app.
Don't Repeat Yourself
Bootstrapping a new project always consists of the exact same steps like setting up TypeScript, installing dependencies, configuring a linter, adding various miscellaneous files and so on.
@hideoo/create-app
is a very opinionated CLI utility to help me quickly bootstrap a new project by either:
pnpm create vite
or pnpm create next-app
Note: pnpm and the GitHub CLI are required to use this utility.
$ pnpm create @hideoo/app
And that's it, no options, no configuration and no extra tweaks needed, you are ready to go!
Either create a new app from scratch (in the current directory or a new directory) or update an existing app.
.prettierignore
filelint
script to lint and typecheck the codeformat
script to ensure formattingpnpm
--fix
option on all files (this is particularly useful when updating an existing project to ensure all files match the proper code style).gitignore
, README.md
and LICENSE
pnpx bumpp
)Licensed under the MIT License, Copyright © HiDeoo.
See LICENSE for more information.
4.3.0
#53 259f199
Thanks @HiDeoo! - Updates more GitHub settings if a repository matching the name of the app exists on GitHub:
FAQs
CLI utility to bootstrap a new project by creating a new app from scratch or update an existing app.
We found that @hideoo/create-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.