
Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
generator-enigma
Advanced tools
Generate a React application with best practice enforcement, integrated testing, and more.
A React webapp scaffolding tool with best practice enforcement, automated testing, and more.
Scaffolding for automation of basic tooling and tasks typically required by React projects, including:
npm i -g generator-enigma
The build script will automatically try to install Yeoman for you if it isn't installed already. Alternatively, you can do this yourself via
npm i -g yo
To set up a new app, create a folder, enter it and run yo enigma
The generator will ask a few questions and insert the prebuilt skeleton for a typical React-based webapp. Then you're rolling!
Once you've set up your app, check out the targets available in package.json
. The conveniences available at npm run <target>
:
build
: Compiles your application JS (with sourcemapping -- good for debugging) to public/assets/bundle.js
and style files (with sourcemapping) to public/assets/style.css
release
: Compiles and minifies your application JS (without sourcemapping) to public/assets/bundle.min.js
and style files (without sourcemapping) to public/assets/style.min.css
- the intent is you should be able to copy the contents of public/
to a server and have it work without modification
start
: Compiles your app and boots up a livereload server -- just make changes to your files (JS, Stylus/CSS, etc.)
test
: Runs your unit tests. (will automatically include any file inside of folders named __tests__
)
coverage
: Runs your unit tests and creates an LCOV coverage report in the /coverage
directory
lint
: Checks your project for JS code style, according to the rules in .eslintrc
The Jasmine 2 test runner is included by default, as a part of the Jest unit testing framework.
Jest supports a broad spectrum of matchers and test-writing styles, so check out their documentation to customize things to your liking!
This module adheres to Semantic Versioning.
5.3.0 (12/31/2016)
Updated some dependencies...
autoprefixer-stylus ^0.9.2 >> ^0.11.0
babel-eslint ^6.0.0 >> ^7.0.0
babel-jest ^15.0.0 >> ^18.0.0
budo ^8.1.0 >> ^9.0.0
jest-cli ^15.1.0 >> ^18.0.0
Also added the "transform inline environment variables" Babel plugin. It helps get the smallest possible minification when used in conjunction with Uglify's dead code elimination in situations where code is only included for development purposes, e.g.
if (process.env.NODE_ENV === 'development') {
// do something special
}
You can read more on it on the Babel website.
Happy New Year! 🎉
FAQs
Generate a React application with best practice enforcement, integrated testing, and more.
The npm package generator-enigma receives a total of 23 weekly downloads. As such, generator-enigma popularity was classified as not popular.
We found that generator-enigma demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.