
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
generator-snow
Advanced tools
A yeoman generator for setting up new front-end projects that use Jade, Stylus, and CoffeeScript, using GulpJS, Browserify, and Jasmine. Also support for localised content, components, SVG icons or icon fonts, and responsive images using picturefill.

Yeoman is a scaffolding application that helps you set up projects so you can get straight into the coding. Snow is a generator that scaffolds out a starter template with:
$ sudo npm install -g yo
To install generator-snow from npm, run:
$ sudo npm install -g generator-snow
Then create a new project directory and then initiate the generator:
$ mkdir <project> && cd $_
$ yo snow <project>
To create a new page:
yo snow:page [pagename]
To install Bower and Component dependencies:
gulp install
During development (compile, watch for changes, run a server):
gulp
For deployment (will package and optimise everything):
gulp deploy
MIT
FAQs
A yeoman generator for setting up new front-end projects that use Jade, Stylus, and CoffeeScript, using GulpJS, Browserify, and Jasmine. Also support for localised content, components, SVG icons or icon fonts, and responsive images using picturefill.
We found that generator-snow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.