Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@nx/workspace
Advanced tools
The Workspace plugin contains executors and generators that are useful for any Nx workspace. It should be present in every Nx workspace and other plugins build on it.
The @nx/workspace npm package is part of the Nx monorepo toolset, which is designed to help developers build and scale applications with a unified approach to code management. It provides powerful tools for project scaffolding, dependency management, and build optimization across multiple frameworks and technologies.
Project Scaffolding
This command sets up a new workspace. It's the first step in using Nx to manage a monorepo. The command creates a new directory called 'myworkspace' with all the necessary configuration and setup files.
npx create-nx-workspace@latest myworkspace
Adding applications and libraries
This command adds a new React application named 'myapp' to the workspace. It sets up all the necessary files and configuration specific to React, demonstrating Nx's capability to handle multiple frameworks seamlessly.
nx g @nrwl/react:app myapp
Dependency Graph
Generates a visual graph of the dependencies within the workspace. This helps in understanding how different projects within the monorepo are interconnected, which is crucial for large projects.
nx dep-graph
Lerna is a tool for managing JavaScript projects with multiple packages, known as a monorepo. Unlike @nx/workspace, Lerna focuses more on managing dependencies and publishing packages rather than providing extensive support for building applications.
Nx is a build system, optimized for monorepos, with plugins for popular frameworks and tools and advanced CI capabilities including caching and distribution.
Using npx
npx create-nx-workspace
Using npm init
npm init nx-workspace
Using yarn create
yarn create nx-workspace
Run:
npx nx@latest init
FAQs
The Workspace plugin contains executors and generators that are useful for any Nx workspace. It should be present in every Nx workspace and other plugins build on it.
The npm package @nx/workspace receives a total of 1,015,614 weekly downloads. As such, @nx/workspace popularity was classified as popular.
We found that @nx/workspace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.