
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Scaffold hybrid mobile apps with Elm, Vite, and Capacitor. (Blog post)
npx elm-native my-app
cd my-app
npm run dev
This gives you a working Elm + Vite + Capacitor project with iOS and Android ready to go, including safe area inset handling so you don't have to fight the notch on day one.
I wanted to write mobile apps in Elm. Getting Elm, Vite, and Capacitor to play nice together is not trivial, so I made a scaffolding tool. It's very much an MVP, but it works.
my-app/
├── src/
│ ├── Main.elm # Your Elm app (starts as a counter)
│ └── main.js # Thin JS bridge to Capacitor
├── index.html # Mobile-friendly HTML shell
├── elm.json
├── vite.config.js
├── capacitor.config.json
├── android/ # Open with Android Studio
├── ios/ # Open with Xcode
└── assets/ # App icons and splash screens
The template includes a simple counter that handles safe area insets, so you can see the full Elm-to-native pattern in action before replacing it with your own code.
main.js reads device info from Capacitor (like safe area insets) and passes it to Elm as flags. Elm handles all the UI. Vite compiles Elm via vite-plugin-elm. Capacitor wraps the built web app in a native shell.
| Command | What it does |
|---|---|
npm run dev | Vite dev server on port 3000 |
npm run build | Production build to dist/ |
npm run sync | Generate assets, build, and sync to native projects |
npm run open:android | Open in Android Studio |
npm run open:ios | Open in Xcode |
npm run run:android | Build and run on Android device/emulator |
npm run run:ios | Build and run on iOS device/simulator |
Install a Capacitor plugin and wire it up in main.js:
npm install @capacitor/camera
Use flags for initial data, ports for runtime communication back to Elm.
MIT
FAQs
Scaffold hybrid mobile apps with Elm + Vite + Capacitor
We found that elm-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.