
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
generator-frontend-dog
Advanced tools
Frontend-dog provides many popular frontend scaffolds, you can custom your project with ES6, PostCSS, ESLint, React, Vue.js, AngularJS, Polymer, Gulp, Webpack...or just a simple lightly demo page :)
First, install Yeoman and generator-frontend using npm (we assume you have pre-installed node.js).
npm install -g yo
npm install -g generator-frontend-dog
Then generate your new project:
yo frontend-dog:demo
Generator frontend-dog provides some nice scaffolds:
A very simple page scaffold, only add gulp && livereload to let you quickly get started to code. If you don't wanna use the fucking Webpack, React or any other framework, you just wanna the pure JavaScript by hand, try it:
yo frontend-dog:demo
It will generate files like this:
├── gulpfile.js # only contain livereload config ├── package.json └── src ├── index.html # the entry page ├── css │ └── index.css └── js └── index.js
Then, run npm install
by yourself, after that run gulp
or npm run dev
command to start server.
This is the default scaffold. Comparing to the demo scaffold, this default scaffold only add the ES6 && PostCSS, and choose BrowserSync to livereload, without any framework.
yo frontend-dog
The scaffold like this:
├── gulpfile.js # livereload + ES6 + PostCSS ├── package.json ├── index.html # the entry page └── src ├── index.html ├── css │ └── index.css └── js └── index.js # the entry js └── config.js
A full scaffold for building a webapp with Vue.js, Polymer, AngularJS or any other popular framework.
// TODO
MIT © 0326
FAQs
popular front end project scaffold
The npm package generator-frontend-dog receives a total of 1 weekly downloads. As such, generator-frontend-dog popularity was classified as not popular.
We found that generator-frontend-dog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.