Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
create-ts-module
Advanced tools
A package initialization template for typescript
modules.
npm init ts-module -y
This initializer is specifically designed to make TypeScript modules for npm installation. When you publish a module made with create-ts-module it will follow the TypeScript publishing recommendations and the pkg.module recommendation by adding "types": "es/index.d.ts"
and "module": "es/index.js"
in the package.json
file.
The generated module does not rely on any large build tool, rather it uses npm scripts. Try running npm run
in your cli to see what is available to do. Here is a short summary:
npm run clean
: clean the output folders ./es
and ./js
.npm run tslint
: lint the ts filesnpm run tsc
: compile the TypeScript in ./ts
into ES2015 in the ./es
folder.npm run babel
: compile the ES2015 in the ./es
into JavaScript in the ./js
folder.npm run compile
: run both the tsc and the babel steps.npm run test
: run unit tests.npm run watch
: continuously run unit tests.The generated package will have few dev-dependencies:
typescript
: Used to compile TypeScript to EcmaScript 2015@babel/*
: A bunch of modules used to compile EcmaScript 2015 to JavaScriptava
: A good and simple test runnerThere are some other dependencies which are needed just to get this all to work.
There is one peer dependency, @babel/runtime
, which is needed for running the JavaScript output. It is set as a peer dependency to minimize the output file size. If you use a bundler like webpack then you probably have this already.
FAQs
Create typescript module
We found that create-ts-module demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.