
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-extension
Advanced tools

Chrome-Extension-Starter start a project for a Chrome Browser Extension including a framework and build system.
It facilitates fast setup, rapid development, and creation of optimized assets for deployment - ideal for developing complex extensions. This project also offers file watching and automatic reloading to narrow development cycles. It utilized many familiar tools for web development (Webpack, Babel, Typescript etc) to create unpacked assets for local development as well as a zip file for deployment to the web store.
Create extension resources automatically via npx
npx create-extension [new directory name]
Once the extension resources are created, the following scripts are available to build the code.
npm run buildnpm run build-devnpm run watch
Once the code is built, the unpacked extension will be available in dist/unpacked and one can directly Load an unpacked extension into the browser.

If built in production mode, a zip file will be created to up load to the Web Store.
src: The location of src files composing the extension
manifest.json: the Manifest file
background: files that run in the background and compose the service worker
injected: files that get injected into web pages via content scripts
popup: files that build the popup.
options: files that build the options page.
util: Utils for use throughout the extension
messaging: Simplilfied messaging utils which provide type safety and simplify Message Passing
To extend the message system with newm, arbitrary types of messages
Available with typescript template only
At build time the following modules will be replaces with noop modules to avoid bloating the built artifacts with ununsed code
build: The utilities for building the extension from the source files.
This project is licensed under the MIT License - see the LICENSE.md file for details
FAQs
Create a browser extension.
We found that create-extension demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.