Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
cra-reason-template
Advanced tools
Configuration and scripts for ReasonReact on Create React App.
$ yarn create react-app my-app --scripts-version cra-reason-template
This package includes scripts and configuration to provide an easy way to get started building ReasonReact applications with Create React App.
For getting to know Create React App
, please visit its official
documentation:
$ npm install -g create-react-app
$ create-react-app my-app --scripts-version cra-reason-template
$ yarn create react-app my-app --scripts-version cra-reason-template
$ npx create-react-app my-app --scripts-version cra-reason-template
$ npm run bs:watch
$ npm run start # on a different shell session
$ yarn bs:watch
$ yarn start # on a different shell session
$ npm run bs:make
$ npm run build
$ npm run bs:make
$ yarn build
This work is based on the work done in
reason-scripts. The main
difference between both projects is that reason-scripts
tries to integrate
the BuckleScript toolchain too much
(subjective) with Webpack, when they don't really play very well together.
cra-reason-template
tries to eschew added complexity by deliberately exposing
the BuckleScript compilation as a pre-requisite to launching the Create React App
process.
Distributed under the MIT license (see LICENSE).
FAQs
Configuration and scripts for ReasonReact on Create React App.
We found that cra-reason-template demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.