
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
generator-craft
Advanced tools
A Yeoman generator that creates a Vagrant box, then installs the Craft CMS and some front-end tools.
A Yeoman generator that creates a Vagrant box, then installs the Craft CMS and some front-end tools.
generator-craft makes a number of assumptions about your environment:
/etc/apache2/sites-available/000-default.conf (because that's what this generator will try to do.)And, of course you need node, npm, Grunt, Yeoman...all the usual goodies. To use Grunt as intended, you'll need the Compass gem installed.
Just run yo craft and answer the appropriate prompts. Be sure to use the name of a Vagrant box that actually exists.
$ yo craft
[?] What is the name of the Vagrant box you wish to import?
[?] What would you like to name the site?
[?] Where is your database hosted?
[?] What is the name of the database user?
[?] What is the database user's password? (default is blank)
[?] What would you like to name the database?
[?] Which grid system would you like to use?
After everything is done, you should have a Vagrant instance with Craft installed and ready to go. Because of the way trials work in Craft 2, you'll need to access the box at the URL "craft.dev". The simplest way to do this is to add a line to your /etc/hosts file so that "craft.dev" will resolve to 127.0.0.1 (if you use port forwarding) or the box's private IP (if you use private networking).
Assuming you forward port 8080 on your host to port 80 on the guest, you would then access the front-end at http://craft.dev:8080/ and the control panel at http://craft.dev:8080/admin with these credentials:
User: admin
Pass: password
The Craft installation will be out-of-date. Just use the updater on the Control Panel to update it before you start working.
FAQs
A Yeoman generator that creates a Vagrant box, then installs the Craft CMS and some front-end tools.
We found that generator-craft demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.