
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
create-express-app
Advanced tools
Scaffold out an Express app.
$ npm init express-app
$ npmx create-express-app
With npm@6
this will run this package with npx
. If you are on an earlier version of npm
you will
need to install globally and run directly:
$ npm install -g create-express-app
$ create-express-app
$ create-express-app --help
Usage: create-express-app [options] <directory>
Options:
-V, --version output the version number
--extended Show extended option prompts (ex. browser, engines, etc)
--force Force overwrite files
--no-prompt Skip prompts and just use input options
--name [name] The package name
--app-type [type] The app type, determines template and defaults
--view-engine [type] The view engine to use (default ejs)
--body-parser Install and use the body-parser package
--consolidate Install and use the consolidate package
--cookie-parser Install and use the cookie-parser package
--serve-static Install and use the serve-static package
--pino Install and use the pino for loggin (pino, pino-http, pino-pretty)
--dependencies [dependencies] Package dependencies
--dev-dependencies [dependencies] Package dev dependencies
--main [main] The app main entry script
-h, --help output usage information
const createExpressApp = require('create-express-app')
(async () => {
// Will create an express app in the current directoy
await createExpressApp({
noPrompt: false,
extended: false,
silent: false,
name: 'my-app'
directory: process.cwd(),
appType: 'bare',
viewEngine: 'ejs',
bodyParser: false,
consolidate: false,
cookieParser: false,
serveStatic: false,
pino: true,
dependencies: [],
devDependencies: [],
main: 'index.js'
})
})()
After that you should be able to start with running:
$ npm run start
FAQs
Scaffold an express app
We found that create-express-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.