Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@qiwi/create-project
Advanced tools
Neutrino can help you quickly start new projects by scaffolding your initial project structure.
@qiwi/create-project
uses middleware and presets behind the scene to build projects.
Run the following command to start the process. Substitute <directory-name>
with the directory name you wish to create for this project.
❯ yarn create @qiwi/project <directory-name>
Note: The create
command is a shorthand that helps you do two things at once. See the Yarn create docs for more details.
❯ npx @qiwi/create-project <directory-name>
@qiwi/create-project
presently offers a scaffolding project to build an application, a library,
or components. Depending on the project type, the CLI helper may offer different flavors
of that project to scaffold. Each project type harnesses the power of middleware or presets to configure itself.
Project | Project Type |
---|---|
React | Application |
Web | Application |
Node.js | Application |
Web | Library |
React Components | Components |
If you wish to use a test runner, @qiwi/create-project
will offer to set one up for you during
the scaffolding phase.
Test Runner | Middleware |
---|---|
Jest | @neutrinojs/jest |
Mocha | @neutrinojs/mocha |
Be sure to check out the test runner preset to get more information on its features and how files should be named.
No two JavaScript projects are ever the same, and as such there may be times when you will need to make modifications to the way your Neutrino presets are building your project. Neutrino provides a mechanism to augment presets and middleware in the context of a project without resorting to creating and publishing an entirely independent preset. To override the build configuration, start with the documentation on customization.
FAQs
Scaffold new QIWI projects with a CLI helper
We found that @qiwi/create-project demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.