
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
create-extenkit
Advanced tools
๐งฉ ExtenKit CLI โ Build modular browser extensions with zero config.
A lightweight, build-free JavaScript framework for creating cross-browser extensions โ with a single command.
ExtenKit is a minimal, modular framework and CLI for building browser extensions using vanilla JavaScript + HTML โ no bundlers, no React, no Webpack.
It runs instantly in your browserโs extension environment and generates all files for you.
It works seamlessly with:
npx create-extenkit my-extensionnpx create-extenkit my-extension
npx create-extenkit my-extension --manifest-v2
Then open about:debugging#/runtime/this-firefox, click Load Temporary Add-on, and choose the generated folder.
| Flag | Description |
|---|---|
--with-options | Adds an options.html page automatically |
--with-background | Adds a background service worker |
--manifest-v2 | Generates a Firefox-compatible manifest |
--blank | Generates a minimal scaffold (no popup UI) |
--template=<name> | Uses a custom template from /templates/templates/<name>/ |
# Basic popup extension (MV3)
npx create-extenkit my-extension
# Firefox-friendly version
npx create-extenkit my-extension --manifest-v2
# With background + options
npx create-extenkit my-extension --with-background --with-options
# Minimal blank template
npx create-extenkit minimal --blank
my-extension/
โโโ manifest.json
โโโ popup.html
โโโ popup.js
โโโ icon.ico
โโโ assets/
โ โโโ icon.png
โ โโโ styles.css
โโโ modules/
โ โโโ home/
โ โ โโโ index.js
โ โโโ about/
โ โ โโโ index.js
โ โโโ options/
โ โ โโโ ...
โ โโโ background/
โ โโโ ...
โโโ extenkit/
โ โโโ component.js
โ โโโ mount.js
โ โโโ store.js
โ โโโ index.js
โโโ package.json
Each generated project contains an /extenkit folder โ the lightweight reactive runtime that powers your UI.
| File | Purpose |
|---|---|
| component.js | Define reactive components with templates & bindings |
| mount.js | Mount and unmount components safely |
| store.js | Persistent, reactive global state |
| index.js | Entry point re-exporting all core helpers |
import { createComponent, mount } from "./extenkit/index.js";
const Counter = createComponent({
name: "Counter",
state: { count: 0 },
template: (s) => `
<div class="counter">
<h3>Count: <span data-bind="count"></span></h3>
<button data-click="inc">+</button>
</div>
`,
methods: {
inc() {
this.state.count++;
},
},
});
mount(Counter, document.body);
extenkit-router โ hash-based navigationextenkit-ui โ built-in UI componentsmodern, dashboard, chat)@extenkit/core as a standalone npm module# 1. Clone repo
git clone https://github.com/exagonsoft/extenkit.git
cd extenkit/cli
# 2. Link locally
npm link
# 3. Test
npx create-extenkit demo-extension
# 4. Publish
npm login
npm publish --access public
MIT ยฉ 2025 โ Built with โค๏ธ by the ExtenKit Team (ExagonSoft)
Because extension development should be instant:
No bundlers. No frameworks. No waiting โ just HTML, JS, and your br
FAQs
๐งฉ ExtenKit CLI โ Build modular browser extensions with zero config.
We found that create-extenkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.