
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@ssense/vue-component-boilerplate
Advanced tools
A sensible starting point for Vue component creation
This repository serves as a sensible starting point for developing Vue components which can be published as node modules.
The following features are provided standard, but many of them can be configured:
gh-pages baked inThis boilerplate uses vue-cli as a generator to scaffold out your project. To install:
npm install -g vue-cli
Next, you will initialize the cli with a folder name and will be prompted with a series of options to configure the new component.
Important: To minimize any need to do manually renaming later, choose a folder name which matches the repo name you will use on Git.
For example, if you want your component to be published as vue-dynamic-button on github and npm, that should be the folder name you select at the start.
With that in mind, initialize the generator:
vue init '@ssense/vue-component-boilerplate' my-folder-name
You will be prompted with options and a new folder will be created for you in the current directory.
An npm script is provided which will create a repository under the github username you specified in the generator's option prompt.
Important: The following command will create a new repository on Github. If you'd like to configure your own git origin, skip this step and do so manually.
Create and initialize a public repository:
cd my-folder-name
npm run init
or create & initialize a private repository:
cd my-folder-name
npm run init:private
After running generator, the usage instructions can be found in README.md in the newly created directory.
FAQs
A sensible starting point for Vue component creation
We found that @ssense/vue-component-boilerplate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.