
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
create-whatever
Advanced tools
The smartest
create-
app template generator.
Create create-greet
package in four steps.
yarn create whatever create-greet --template typescript
or if you use npm
, then run npx create-whatever create-greet
cd create-greet
and edit files inside templates/default
.
Run yarn build
or npm run build
to transpile TypeScript into JavaScript.
Run yarn publish
or npm publish
to publish your create-
app to npm.
Edit files inside templates/default
. Text files will be passed through Mustache template engine that all template strings is replaced with respective value.
{{name}}
package name{{description}}
package description{{author}}
author name{{email}}
author email{{author_full}}
author name formatted with {{name}} <{{email}}>
if email given, otherwise {{name}}
{{license}}
package license (e.g. MIT
){{year}}
current year (e.g. 2020
)You can find the app config in src/cli.ts
.
import {create} from 'create-whatever';
create('create-greet', templateRoot, {
caveat: `Your app has been created successfuly!`,
extra: {
language: {
type: 'input',
describe: 'greeting language',
default: 'en',
prompt: 'if-no-arg',
},
},
});
templateRoot
set to path.resolve(__dirname, '../templates')
. You can change it to whereever you want.
caveat
string | undefined
This message will be shown after the generation process.
extra
object | undefined
An extra options passed to the app. These options will be accessible as template string. In this case, --language
cli option and {{language}}
template string will be available.
PRs are always welcome!
FAQs
create 'create-' app
The npm package create-whatever receives a total of 1 weekly downloads. As such, create-whatever popularity was classified as not popular.
We found that create-whatever demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.