
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
一个快速创建项目的脚手架
这是一个快速创建项目的脚手架,核心只做了一件事情:根据你选择的选项,拉取对应的代码到本地。
以下是目前支持的模板代码仓库:
| 模板仓库 | 支持 |
|---|---|
| webpack5 + ts + vue3 | ✅ |
| webpack5 + ts + react17 | ✅ |
| webpack5 + ts + noframe | ✅ |
| vite2 + ts + vue3 | ✅ |
| vite2+react17 | ❌ |
| nuxt3+vue3 | ❌ |
| next12+react18 | ❌ |
npm i billd-cli -g
查看版本号
billd -v
# 或者
billd --version
创建项目
billd create projectname
如果当前目录已存在 projectname,可以手动指定覆盖或者合并(如果不指定的话,billd-cli 也会自动判断是否已存在,会提示用户选择合并或者覆盖)
# 合并
billd create projectname -m
# 或者
billd create projectname --merge
# 覆盖
billd create projectname -f
# 或者
billd create projectname --force
前端框架(可选):
| 前端框架 | 支持 |
|---|---|
| vue3 | ✅ |
| react17 | ✅ |
| noframe | ✅ |
构建工具(可选):
| 构建工具 | 支持 |
|---|---|
| webpack5 | ✅ |
| vite2 | ✅ |
开发语言(可选):
| 开发语言 | 支持 |
|---|---|
| javascript | ❌ |
| typescript | ✅ |
css 预处理器(可选):
| css 预处理器 | 支持 |
|---|---|
| sass/scss | ✅ |
| less | ❌ |
| stylus | ❌ |
代码规范(内置):
| 代码规范 | 支持 |
|---|---|
| eslint | ✅ |
| prettier | ✅ |
工程化配置(内置):
| 工程化配置 | 支持 |
|---|---|
| husky | ✅ |
| commitizen | ✅ |
| commitlint | ✅ |
| lint-staged | ✅ |
| standard-version | ✅ |
即确保本地的修改已全部提交(git status 的时候会显示:nothing to commit, working tree clean ),否则会导致执行 release:local 脚本失败
npm run release:local
该脚本内部会做以下事情:
注意:如果你使用 yarn run release:online,请确保执行前 yarn 的镜像是 npm 官方镜像:https://registry.npmjs.org/
npm run release:online
该脚本内部会做以下事情:
FAQs
A cli for quickly create project
The npm package billd-cli receives a total of 8 weekly downloads. As such, billd-cli popularity was classified as not popular.
We found that billd-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.