
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A modern Electron application boilerplate combining the power of Electron with React, TypeScript, TanStack Router, and Shadcn/ui components, built with Vite for fast development.
For manual set up, please read this guide.
Install dependencies:
npm install
Start the development application (PowerShell example):
npm start
Notes:
npm start runs electron-forge start (see package.json).src/app/routeTree.gen.ts if they don't exist yet.Common npm scripts available in this project:
npm start — run the app in development (Electron + Vite dev tooling)npm run package — package the app locallynpm run make — create distributables for your platformnpm run lint — run ESLint on the TypeScript sourcesPackage the application:
npm run package
Create distributables for your platform:
npm run make
src/
├── app/ # React application
│ ├── components/ # Reusable UI components
│ │ └── ui/ # Shadcn/ui components
│ ├── lib/ # Utility functions
│ ├── routes/ # TanStack Router routes
│ ├── index.css # Global styles
│ └── main.tsx # React application entry point
├── native/ # Native API layer
│ ├── apis/ # Native API implementations
│ │ ├── readdir.ts # File system directory reading
│ │ └── say-hi.ts # Example native function
│ ├── constants.ts # API constants
│ ├── native-api.ts # Native API registry
│ └── types.ts # TypeScript definitions
├── main.ts # Electron main process
├── preload.ts # Electron preload script
└── renderer.ts # Electron renderer entry point
The app folder contains the React application with:
The native folder provides a bridge between the React frontend and Node.js/Electron APIs:
main.ts): Controls application lifecycle and creates renderer processespreload.ts): Securely exposes native APIs to the rendererrenderer.ts): Hosts the React applicationnativeAPI.invokeNativeAPI(NATIVE_API_SAY_HI, "Your Name");
nativeAPI.invokeNativeAPI(NATIVE_API_READDIR, "/path/to/directory");
src/native/apis/src/native/constants.tssrc/native/native-api.tsMIT License
longlt201203
FAQs
My Electron application description
We found that beye demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.