
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
generator-iojs
Advanced tools
A basic node module template, that includes handy git hooks, a release script, and auto-changelog generation.
A basic module template, that includes handy git hooks, a release script, es{6,2015} support via babel, and auto-changelog generation.
Here's what you get:
package.json.npmignore file up-to-dateCONTRIBUTING.mdLICENSEREADME.md with a template that you can fill in.travis.yml for easy CItape, and it uses smokestack so you can do browser tests too.git push, to ensure you can never push bad codegit push to make sure your project is always secureTable of Contents generated with DocToc
npm install -g generator-iojs yo
yo iojs
.babelrcAs long as you haven't turned off es6 (and why would you!?), this file is created to configure Babel, the es6 compiler. By default, it includes a closure-elimination plugin. This makes the compiled code faster!
.editorconfigThe Editor Config standard enforces very basic white space rules in files.
.gitignoreEver accidentally commit .DS_Store to git? There are a bunch of defaults here that you almost certainly don't want to commit.
.eslintrcLinters are good! They save you from making silly mistakes. This is a fairly opinionated linter setup, but it catches you from many silly errors. The linter will be run before every commit and before every release.
.npmignoreWhat you commit to git and what you publish to npm don't need to be the same thing. Just like you wouldn't commit compiled files to git, you don't want to send unnecessary files to npm. When others npm install your module, they don't need all your tests or source files. These defaults strip out everything but what people really need when they install your module. It's kept up-to-date semi-automatically with dmn.
.npmrcLocal configuration for npm commands. Most of the time, when you're installing modules, you want to save them to package.json. This changes the default behavior of npm install to always be npm install --save. --save-dev overrides this and works as normal.
.travis.ymlTests are good. Automatically testing is even better. travis is free for open source modules and is a good choice for a CI server. This file is configured to automatically test your code against node 0.10, 0.12, and iojs latest. It puts you into the faster build environment on travis.
README.mdWithout docs, no one (including you, 3 months from now) will be able to figure out how to use this thing you've built! This readme provides a decent structure for a readme. It includes a table of contents that is automatically updated when deploying a new version.
LICENSECHANGELOG.mdChangelogs are really important for open source projects, but they're a pain to maintain. This changelog will automatically get updated (but give you a chance to edit it) every time you run npm run release.
CONTRIBUTING.mdA file for github! This will show a banner above the new issue and new PR screens. This file has a set of general rules.
package.jsonSo much magic! This sets up your node module with good defaults, and installs a bunch of dev dependencies to make magic! There are many included scripts to make dev life easier. npm run release and npm run tdd are some favorites.
index.jsJust dummy content for your new node module.
test/test.jsJust a dummy test file.
bin/<module name>If you specified this module as a CLI module, this file gets created for you. It should be a light-weight wrapper around index.js so that you can use the module both from the CLI and programatically.
To publish, run npm run release -- [{patch,minor,major}]
NOTE: you might need to sudo ln -s /usr/local/bin/node /usr/bin/node to ensure node is in your path for the git hooks to work
Tests are in tape. They can be run with npm test.
Tests can be run in a loop with npm run tdd
npm i -g npmgit push --follow-tags will work. brew install gitArtistic 2.0 © Joey Baker
FAQs
A basic node module template, that includes handy git hooks, a release script, and auto-changelog generation.
The npm package generator-iojs receives a total of 33 weekly downloads. As such, generator-iojs popularity was classified as not popular.
We found that generator-iojs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.