
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
endify-fork
Advanced tools
Vue.js on front, Node.js behind, Electron ready, Mobile soon - All in one codebase

JS Framework connecting backend, frontend and native JavaScript based apps
You can get a fresh Endify project with one simple command:
npx create-endify-app
Check the guide if you want to setup it on your own.
Guide:
npm i endify
or
yarn add endify
Then create endify.config.client in the root dir of your project
Then fill it with configuration:
export default {
// Configuration
}
I was working with Vue Storefront and Nuxt for a while, but their biggest mistake was that it's not everything to make the website work. Of course you need an API in another project, some workers, services and so on... So I realized that why not to connect them both? And here it is - Endify.
It supports a lot of things (out of the box!):
✔️ Frontend with Vue.js
✔️ Backend in Node.js
✔️ One codebase
✔️ Extending frontend & backend with plugins
✔️ Vuex store
✔️ Code splitting
✔️ Electron - Yeah, you write once, you get a website and an app for Windows & Mac, so cool!
✔️ Service container with awilix
✔️ SSR (Server side rendering)
✔️ Hot reload of frontend and backend (woah! I worked a few weeks on that)
✔️ It's fully dockerized
✔️ It allows to test itself with jest
✔️ It includes pnpm instead of npm for the fastest installing experience
✔️ It has some Github Actions examples of Testing & Building
✔️ And even it has some great tutorial on how to apply image to kubernetes with Github Actions!
✔️ You install it with one command `
FAQs
Vue.js on front, Node.js behind, Electron ready, Mobile soon - All in one codebase
The npm package endify-fork receives a total of 46 weekly downloads. As such, endify-fork popularity was classified as not popular.
We found that endify-fork demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.