
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A CLI tool to remove Lovable metadata and tracking from Lovable projects and prepare them for deployment to various platforms.
# Clone the repository
git clone https://github.com/neckolis/delovable.git
cd delovable
# Install dependencies
npm install
# Build the project
npm run build
# Run the tool directly
node dist/index.js <project-path> [options]
npm install -g github:neckolis/delovable
npx github:neckolis/delovable <project-path> [options]
npm install -g delovable
delovable <project-source> [options]
project-source: Path to your Lovable project or GitHub repository URL (required)
delovable ./my-lovable-projectdelovable https://github.com/username/lovable-project-p, --platform <platform>: Target deployment platform (cloudflare, vercel, netlify, none) (default: "none")-v, --verbose: Enable verbose output-o, --output <output-dir>: Output directory for repository-based projects--version: Show version number-h, --help: Display helpRemove Lovable metadata from a local project:
delovable ./my-lovable-project
Remove Lovable metadata from a GitHub repository and save to an output directory:
delovable https://github.com/username/lovable-project --output ./cleaned-project
Remove Lovable metadata and prepare for Cloudflare Pages deployment:
delovable ./my-lovable-project --platform cloudflare
Process a GitHub repository, prepare for Vercel deployment, and save with verbose output:
delovable https://github.com/username/lovable-project --platform vercel --output ./cleaned-project --verbose
Make sure you have a Lovable project that you want to clean up. This could be:
git clone https://github.com/neckolis/delovable.git
cd delovable
npm install
npm run build
# Basic usage with local project
node dist/index.js /path/to/your/lovable-project
# With GitHub repository
node dist/index.js https://github.com/username/lovable-project --output ./cleaned-project
# With verbose output
node dist/index.js /path/to/your/lovable-project --verbose
# Prepare for deployment to Cloudflare
node dist/index.js /path/to/your/lovable-project --platform cloudflare
After running the tool, check your project to ensure:
When specifying a target platform, Delovable will create the necessary configuration files:
Creates a wrangler.toml file configured for static site deployment.
Creates a vercel.json file configured for static site deployment.
Creates a netlify.toml file configured for static site deployment.
If you get a "command not found" error when trying to run delovable, make sure you're either:
node dist/index.js from the repository directorynpm install -g delovableIf you encounter any other issues:
--verbose flag to get more detailed outputMIT
FAQs
CLI tool to remove Lovable metadata and prepare apps for deployment
We found that delovable demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.