
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@tobiastengler/create-relay-app
Advanced tools
Easy configuration of Relay for existing projects
Easy configuration of Relay.js for existing projects
Setting up Relay can be quite time consuming, since there are many setup steps that might differ depending on the toolchain you use.
The goal of this project is to automate the setup process as much as possible and give you a fast and consistent configuration experience across the most popular React toolchains.
Contrary to many existing tools that aim to solve similiar use cases, this project isn't simply scaffolding a pre-configured boilerplate. We actually analyze your existing code and only insert the necessary Relay configuration pieces.
create-relay-app
supports:
npm/yarn/pnpm create @tobiastengler/relay-app
Note: You can specify
-i
after the command to walk through an interactive prompt, instead of the script inferring your project's details.
npm/yarn/pnpm create @tobiastengler/relay-app [options]
Warning
npm requires you to pass
--
before any command to a starter kit, e.g.
npm create @tobiastengler/relay-app -- --interactive
.
Displays information about all of the available options.
Displays the current version of the script.
Displays an interactive prompt that allows you to manually input your project's details for options that weren't supplied as CLI arguments.
Default: false
The toolchain, e.g. bundler and configuration, your project was setup with.
Expects:
next
vite
cra
Default: next
, if the next
package is installed. vite
, if the vite
package is installed and otherwise cra
.
If specified, we assume your project is built with TypeScript.
Default: true
, if the typescript
package is installed or there is a tsconfig.json
file in the root directory of your project. Otherwise false
.
Specifies the location of the GraphQL schema file inside of your project directory.
Expects:
A path relative to the root directory of your project and ending in the .graphql
extension.
Default: ./src/schema.graphql
, if the toolchain is next
, otherwise the value of --src joined with schema.graphql
.
Specifies the source directory of your project, where the Relay compiler will be run on.
Expects:
A path to a directory relative to the root directory of your project.
Default: ./
, if the toolchain is next
, otherwise ./src
.
Specifies a directory, where all artifacts generated by the Relay compiler will be placed.
Expects:
A path to a directory relative to the root directory of your project.
Default: ./__generated__
, if the toolchain is next
, otherwise it's not set.
Adds support for GraphQL Subscriptions via graphql-ws to your network layer.
Default: Not set.
Specify the Node.js package manager to use when packages need to be installed.
Expects:
npm
yarn
pnpm
Default: yarn
, if there's a yarn.lock
file and yarn
is installed. pnpm
, if there's a pnpm-lock.yml
file and pnpm
is installed. Otherwise the package manager that is executing the script will be used to install packages.
Does not exit the script, if it's run in a directory with un-commited Git changes.
Default: false
Skips the installation of packages.
Default: false
FAQs
Easy configuration of Relay for existing projects
The npm package @tobiastengler/create-relay-app receives a total of 19 weekly downloads. As such, @tobiastengler/create-relay-app popularity was classified as not popular.
We found that @tobiastengler/create-relay-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.