
Security News
Cline CLI npm Package Compromised via Suspected Cache Poisoning Attack
A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k weekly downloads.
generate-install
Advanced tools
Generator that automatically detects the dependencies or devDependencies to install based on the templates or includes that are dynamically used by your generator. This can be used as a sub-generator or plugin in your own generator.
Generator that automatically detects the dependencies or devDependencies to install based on the templates or includes that are dynamically used by your generator. This can be used as a sub-generator or plugin in your own generator.
(TOC generated by verb using markdown-toc)
Generate is a command line tool and developer framework for scaffolding out new GitHub projects using generators and tasks.
Answers to prompts and the user's environment can be used to determine the templates, directories, files and contents to build. Support for gulp, base and assemble plugins, and much more.
For more information:
This generator can be installed as a dependency and registered with the .use method in your own generator.
Install
Install with npm:
$ npm install generate-install
Example usage
In your own generator:
module.exports = function(app) {
app.use(require('generate-install'));
};
Once registered, generate-install does two things:
Adds a .postWrite middleware, which runs after a file is written to the file system to see if an install object was defined in yaml front-matter).
Example
This example shows a basic gulpfile.js template with front-matter that defines gulp as a dev dependency.
---
install:
devDependencies: ['gulp']
---
var gulp = require('gulp');
gulp.task('default', function(cb) {
// do task stuff
cb();
});
If the install object exists, the middleware will extract the dependencies and devDependencies, filtering out any deps that are already installed and listed in package.json.
This also works:
---
install: ['gulp']
---
var gulp = require('gulp');
gulp.task('default', function(cb) {
// do task stuff
cb();
});
Which is normalize to {devDependencies: ['gulp']}.
The second thing this generator adds is an optional task for prompting the user.
Example usage
Run after other tasks are finished:
app.use(require('generate-install'));
app.task('generate-stuff', function(cb) {
cb();
});
app.generate(['generate-stuff', 'install'], function(err) {
if (err) return console.log(err);
});
This task is optional, since the user can also install this generator globally and run is directly.
Example
If your generate is named foo, the user can do this:
gen foo install
Visit Generate's task documentation.
.eslintrc.json or .eslintignore file from a pre-defined or user-defined template. Can be… more | homepagePull requests and stars are always welcome. For bugs and feature requests, please create an issue.
Install dev dependencies:
$ npm install -d && npm test
Jon Schlinkert
Copyright © 2016, Jon Schlinkert. Released under the MIT license.
This file was generated by verb-generate-readme, v0.1.30, on August 18, 2016.
FAQs
Generator that automatically detects the dependencies or devDependencies to install based on the templates or includes that are dynamically used by your generator. This can be used as a sub-generator or plugin in your own generator.
The npm package generate-install receives a total of 11 weekly downloads. As such, generate-install popularity was classified as not popular.
We found that generate-install demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k weekly downloads.

Product
Socket is now scanning AI agent skills across multiple languages and ecosystems, detecting malicious behavior before developers install, starting with skills.sh's 60,000+ skills.

Product
Socket now supports PHP with full Composer and Packagist integration, enabling developers to search packages, generate SBOMs, and protect their PHP dependencies from supply chain threats.