
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A collection of frontend-friendly scripts for linting, testing and building apps bundled as a CLI
CLI toolbox for common scripts for frontend projects that includes:
Coming soon:
Working on multiple frontend projects where you need to set up the same tools and processes and then maintain them across all of them is a tideous job.
Frontwerk is a CLI that abstracts away all those processes and configuration and exposes the same API that you can use across all your projects.
You can pick and choose which tools to use (i.e. if you don't want to format your JS with prettier, you don't have to).
This is heavily inspired by kcd-scripts by the amazing Kent C. Dodds (you should definitely follow him on Twitter by the way) and react-scripts.
So why not just use kcd-scripts
? You absolutely should! We're not in a
zero-sum game here. I basically wanted to learn how he created everything
without even knowing I'd get this far!
This module is distributed via npm which is bundled with node and
should be installed as one of your project's devDependencies
:
npm install --save-dev frontwerk
or with yarn:
yarn add --dev frontwerk
This is a CLI and exposes a bin called frontwerk
. You can run
frontwerk
with no arguments to show a list of available commands. Or simply checkout the
src/scripts
directory for all the available scripts.
Then simply ammend your package.json
scripts
property to include the scripts
you want to use:
{
"scripts": {
"lint:js": "frontwerk lint",
"lint:css": "frontwerk stylelint",
"test": "frontwerk test --no-watch",
"test:watch": "frontwerk test",
"build": "frontwerk build",
"format": "frontwerk format"
}
}
Although it works out of the box, Frontwerk allows you to specify your own config for the various scripts, either by extending the config provided or just by using your own, depending on the script. Frontwerk respects the convention used by each of its underlying tools (eslint, stylelint, etc.). Basically, if it's possible with that tool, it's possible with frontwerk.
Example with ESLint
{
"extends": "./node_modules/frontwerk/eslint.js",
"rules": {}
}
or, simply start with your own config to pass to ESLint:
{
"extends": "google"
}
Note that eslintignore is coincidentally ignored, so until this issue is resolved, please pass the eslint ignore as allowed by eslint's configuration.
You can find more extensive documentation about each tool on the website.
MIT
FAQs
A collection of frontend-friendly scripts for linting, testing and building apps bundled as a CLI
The npm package frontwerk receives a total of 0 weekly downloads. As such, frontwerk popularity was classified as not popular.
We found that frontwerk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.