
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
A minimalistic framework for server-rendered Vue.js applications (inspired by Next.js)

Vue.js Meta Framework to create complex, fast & universal web applications quickly.
./static/ is mapped to /nuxt.config.js filelayouts/ directorypages/Learn more at nuxtjs.org.
Professionally supported Nuxt.js is now available!
Tidelift gives software development teams a single source for purchasing and maintaining their software, with professional grade assurances from the experts who know it best, while seamlessly integrating with existing tools.
Get supported Nuxt with the Tidelift Subscription.
Become a partner and get your logo on our README on GitHub and every page of https://nuxtjs.org website with a link to your site. [Become a partner]
Become a sponsor and get your logo on our README on GitHub with a link to your site. [Become a sponsor]
Support us with a monthly donation and help us continue our activities. [Become a backer]
$ npm install nuxt
Add a script to your package.json like this:
{
"scripts": {
"start": "nuxt"
}
}
After that, the file-system is the main API. Every .vue file becomes a route that gets automatically processed and rendered.
Populate ./pages/index.vue inside your project:
<template>
<h1>Hello {{ name }}!</h1>
</template>
<script>
export default {
data: () => {
return { name: 'world' }
}
}
</script>
And then run:
npm start
Go to http://localhost:3000
:point_right: We recommend to start directly with our cli create-nuxt-app for the latest updates.
Or you can start by using one of our starter templates:
const { Nuxt, Builder } = require('nuxt')
// Import and set nuxt.js options
let config = require('./nuxt.config.js')
config.dev = (process.env.NODE_ENV !== 'production')
let nuxt = new Nuxt(config)
// Start build process (only in development)
if (config.dev) {
new Builder(nuxt).build()
}
// You can use nuxt.render(req, res) or nuxt.renderRoute(route, context)
Learn more: https://nuxtjs.org/api/nuxt
You might want to use your own server with your configurations, your API and everything awesome your created with. That's why you can use nuxt.js as a middleware. It's recommended to use it at the end of your middleware since it will handle the rendering of your web application and won't call next().
app.use(nuxt.render)
Learn more: https://nuxtjs.org/api/nuxt-render
This is mostly used for nuxt generate and test purposes but you might find another utility!
nuxt.renderRoute('/about', context)
.then(function ({ html, error }) {
// You can check error to know if your app displayed the error page for this route
// Useful to set the correct status code if an error appended:
if (error) {
return res.status(error.statusCode || 500).send(html)
}
res.send(html)
})
.catch(function (error) {
// And error appended while rendering the route
})
Learn more: https://nuxtjs.org/api/nuxt-render-route
Please take a look at https://nuxtjs.org/examples or directly in https://github.com/nuxt/nuxt.js/tree/dev/examples.
To deploy, instead of running nuxt, you probably want to build ahead of time. Therefore, building and starting are separate commands:
nuxt build
nuxt start
For example, to deploy with now a package.json like follows is recommended:
{
"name": "my-app",
"dependencies": {
"nuxt": "latest"
},
"scripts": {
"dev": "nuxt",
"build": "nuxt build",
"start": "nuxt start"
}
}
Then run now and enjoy!
Note: we recommend putting .nuxt in .npmignore or .gitignore.
Sébastien Chopin 📝 🐛 💻 🎨 📖 💬 👀 📢 | Alexandre Chopin 🎨 📖 📋 📦 💬 📢 | Pooya Parsa 🐛 💻 🔌 💬 👀 🔧 | Clark Du 🐛 💻 💡 👀 ⚠️ 🔧 | Alexander Lichter 💬 🐛 💻 💡 👀 ⚠️ | Jonas Galvez 💬 🐛 💻 💡 👀 ⚠️ |
|---|
Thank you to all our contributors!
Please refer to our Contribution Guide
Thanks to BrowserStack!
FAQs
A minimalistic framework for server-rendered Vue.js applications (inspired by Next.js)
The npm package @xme/nuxt receives a total of 8 weekly downloads. As such, @xme/nuxt popularity was classified as not popular.
We found that @xme/nuxt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.