Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
create-redwood-app
Advanced tools
Redwood is an opinionated framework for modern multi-client applications, built on React, GraphQL, and Prisma with full TypeScript support and ready to go with zero config.
Want great developer experience and easy scaling? How about an integrated front- and back-end test suite, boilerplate code generators, component design, logging, API security + auth, and serverless or traditional deploy support? Redwood is here! Redwood works with the components and development workflow you love but with simple conventions and helpers to make your experience even better.
Redwood requires Node.js =20.x.
yarn create redwood-app my-redwood-app
cd my-redwood-app
yarn install
yarn redwood dev
Contributors are Welcome! Get started here. And don't hesitate to ask for help on the forums and chat.
Table of Contents
This package creates and installs a Redwood project, which is the entry point for anyone using Redwood. It has two parts:
src/create-redwood-app.js
templates/
directoryThe installation script is built with Yargs.
The project codebase in templates/
uses Yarn Workspaces for a monorepo project containing the API and Web Sides. Redwood packages are included in templates/ts/package.json
, templates/ts/web/package.json
, and templates/ts/api/package.json
, respectively.
create-redwood-app
from your local repo and create a projectFirst, run the following commands in the root of the monorepo:
yarn install
yarn build
Then, navigate to the create redwood app package:
cd packages/create-redwood-app
Run yarn node
on the built file (dist/create-redwood-app.js
) and pass in the path to the new project:
yarn node ./dist/create-redwood-app.js /path/to/new/redwood-app
[!NOTE] the new project will install with the most recent major Redwood package version by default.
By default yarn create will pick the latest stable version to run, but you can specify a different version via yarn too!
To try the canary version, run:
npx create-redwood-app@canary /path/to/project
Note that this will still create a project with the latest stable version, but run the canary version of create-redwood-app, and is mainly useful for debugging this package, and not the redwood canary release.
You can specify any tag or version instead of @canary
There are three options for developing with the installed project:
1. Upgrade the project to use the latest canary release
cd /path/to/new/redwood-app
yarn rw upgrade -t canary
2. Use the workflow and tools for local package development
FAQs
Unknown package
The npm package create-redwood-app receives a total of 7,067 weekly downloads. As such, create-redwood-app popularity was classified as popular.
We found that create-redwood-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.