
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@vrdons/module-template
Advanced tools
A modern TypeScript module template with comprehensive tooling for development, building, and publishing.
# Clone the template
git clone https://github.com/vrdons/module-template.git
cd module-template
# Install dependencies
npm install
# Build the project
npm run build
# Lint code
npm run lint
# Fix linting issues
npm run lint:fix
module-template/
├── src/ # Source code
│ └── index.ts # Main entry point
├── dist/ # Built output (generated)
├── tests/ # Test files
├── scripts/ # Build and automation scripts
│ ├── actions/ # GitHub Actions and release scripts
│ ├── husky/ # Git hook scripts
│ └── utils/ # Utility functions
├── .github/ # GitHub workflows
├── .husky/ # Husky git hooks
└── ...config files
| Script | Description |
|---|---|
npm run build | Build the project with tsup |
npm run lint | Run ESLint on all files |
npm run lint:fix | Fix ESLint issues automatically |
npm run changelog | Generate changelog from commits |
npm run release:git | Create GitHub release |
npm run release:npm | Publish to NPM |
The project uses modern TypeScript configuration with:
tsup is configured to:
The module supports both CommonJS and ESM imports:
// ESM
import { version } from 'module-template';
// CommonJS
const { version } = require('module-template');
src/npm run buildnpm run lintThis project follows Conventional Commits:
type(scope): description
feat: add new feature
fix: resolve bug
docs: update documentation
style: formatting changes
refactor: code restructuring
test: add tests
chore: maintenance tasks
npm run release:git
npm run release:npm
MIT License - see LICENSE file for details.
vrdons - GitHub Profile
This template provides a solid foundation for TypeScript modules with modern tooling and best practices. Customize it according to your project's specific needs.
FAQs
Module template
We found that @vrdons/module-template demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.