
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
create-harold-app
Advanced tools
Static site and blog generator based on Handlebars and Markdown.
Because I wanted to have a simple static site generator to build and host on Netlify. I know there are many of them. I built one to have better control over it.
What is important, I equipped it with two themes that you can use and modify for your needs. I prepared the theme system for custom ones in the future. This is also added value. We don’t need to start every site/blog repeatedly from the ground.
npx create-harold-app my-app
(npx is a package runner tool that comes with npm 5.2+ and higher, see instructions for older npm versions)
npm init harold-app my-app
npm init is available in npm 6+
yarn create harold-app my-app
yarn create is available in Yarn 0.25+
It will create a directory called my-app inside the current folder. Inside that directory, it will generate the initial project structure and install the transitive dependencies.
As an option you can choose with which template it should init the project. Possible choices:
If you want to init the project with bare
template pass additional option -t bare
. For example: npm init harold-app my-app -t bare
In the future there will be a possibility to pass custom templates.
Write create-harold-app --help
in terminal to get the list of options.
From newly created app's directory (in our case my-app
). Run npm start
. It will serve the app under localhost:3000
. To change the port just add PORT
env, like: PORT=3002 npm start
.
WIP. Available soon.
MIT
julian.io
0.1.0 (2021-04-25)
FAQs
Static blog/site generator
The npm package create-harold-app receives a total of 0 weekly downloads. As such, create-harold-app popularity was classified as not popular.
We found that create-harold-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.