Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
create-inferno-library
Advanced tools
CLI for creating reusable, modern Inferno libraries using Rollup and create-inferno-app.
This is a fork of create-react-library
.
At the moment, it doesn't offer a Typescript option like create-react-library
, but if you'd like to have it,
let me know, or send up a pull request :)
cjs
and es
module formatsThis package requires node >= 4
, but we recommend node >= 8
.
yarn global add create-inferno-library
# OR npm install -g create-inferno-library
npx create-inferno-library
(npx comes with npm 5.2+ and higher, see instructions for older npm versions)
create-inferno-library
Answer some basic prompts about your module, and then the CLI will perform the following steps:
At this point, your new module should resemble this screenshot and is all setup for local development.
Local development is broken into two parts (ideally using two tabs).
First, run rollup to watch your src/
module and automatically recompile it into dist/
whenever you make changes.
yarn start
# OR npm start
# runs rollup with watch flag
The second part will be running the example/
create-inferno-app that's linked to the local version of your module.
# (in another shell)
cd example
yarn start
# OR npm start
# runs create-inferno-app dev server
Now, anytime you make a change to your library in src/
or to the example app's example/src
, create-inferno-app
will live-reload your local dev server so you can iterate on your component in real-time.
npm publish
This builds cjs
and es
versions of your module to dist/
and then publishes your module to npm
.
Make sure that any npm modules you want as peer dependencies are properly marked as peerDependencies
in package.json
. The rollup config will automatically recognize them as peers and not try to bundle them in your module.
yarn deploy
# OR npm run deploy
This creates a production build of the example create-inferno-app
that showcases your library and then runs gh-pages
to deploy the resulting bundle.
Here is a branch which demonstrates how to use multiple named exports. The module in this branch exports two components, Foo
and Bar
, and shows how to use them from the example app.
Here is a branch which demonstrates how to make use of a relatively complicated peer dependency, material-ui. It shows the power of rollup-plugin-peer-deps-external which makes it a breeze to create reusable modules that include complicated material-ui subcomponents without having them bundled as a part of your module.
The CLI is based on this boilerplate, which you can optionally read about here.
Here are some example libraries that have been bootstrapped with create-inferno-library
.
Want to add yours to the list? Submit an issue.
MIT © Tom Golden
Thanks to Travis Fischer for making create-react-library.
FAQs
CLI for easily bootstrapping modern inferno libraries
We found that create-inferno-library demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.