Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
create-vue
Advanced tools
The recommended way to start a Vite-powered Vue project
To create a new Vue project using create-vue
, simply run the following command in your terminal:
npm create vue@latest
[!NOTE] (
@latest
or@legacy
) MUST NOT be omitted, otherwisenpm
may resolve to a cached and outdated version of the package.
By default the command will run in interactive mode, but you can also provide feature flags in the CLI arguments to skip the prompts. Run npm create vue@latest --help
to see all available options.
If you need to support IE11, you can create a Vue 2 project with:
npm create vue@legacy
[!WARNING]
Vue 2 Has Reached End of Life
Vite-Powered: Vue CLI is based on webpack, while create-vue
is based on Vite. Vite supports most of the configured conventions found in Vue CLI projects out of the box, and provides a significantly better development experience due to its extremely fast startup and hot-module replacement speed. Learn more about why we recommend Vite over webpack here.
Scaffolding Tool: Unlike Vue CLI, create-vue
itself is just a scaffolding tool. It creates a pre-configured project based on the features you choose, and delegates the rest to Vite. Projects scaffolded this way can directly leverage the Vite plugin ecosystem which is Rollup-compatible.
If you're transitioning from Vue CLI to Create Vue, we've got you covered. Here are some resources to help you with the migration: How to Migrate from Vue CLI to Vite
FAQs
🛠️ The recommended way to start a Vite-powered Vue project
The npm package create-vue receives a total of 17,742 weekly downloads. As such, create-vue popularity was classified as popular.
We found that create-vue demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.