
Security News
The Code You Didn't Write Is Still Yours to Defend
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.
一个快捷创建完整模板项目和批量克隆仓库的命令行工具。
npm install -g hmf-cli
npx hmf-cli create
npx hmf-cli list
npx hmf-cli clone
hmf-cli create
# or
hmf-cli create my-project
hmf-cli list
hmf-cli create my-project -t react
# or
hmf-cli create my-project --template react
# 使用默认配置文件 hmf-repos.json
hmf-cli clone
# 指定配置文件
hmf-cli clone -c my-repos.json
# 克隆单个仓库
hmf-cli clone -r vue3-ts-template
# 克隆多个仓库
hmf-cli clone -r vue3-ts-template react-ts-template vue3-mini-template
# 指定 GitHub 用户名
hmf-cli clone -u your-username -r repo1 repo2
# 指定克隆到的目录
hmf-cli clone -d ./projects -r vue3-ts-template react-ts-template
创建一个 hmf-repos.json 文件来配置要批量克隆的仓库:
{
"username": "huangmingfu",
"repos": [
"vue3-ts-template",
"vue3-mini-template",
"react-ts-template",
"react-mobile-template"
]
}
-c, --config <path>: 指定配置文件路径(默认: hmf-repos.json)-u, --username <username>: 指定 GitHub 用户名(默认: huangmingfu)-r, --repos <repos...>: 直接指定要克隆的仓库名称(多个用空格分隔)-d, --dir <directory>: 指定克隆到的目录hmf-cli -v
# or
hmf-cli --version
hmf-cli --help
hmf-cli create --help
hmf-cli clone --help
npm uninstall -g hmf-cli
# 交互式创建项目
hmf-cli create
# 创建 React 项目
hmf-cli create my-react-app -t react
# 创建 Vue3 项目
hmf-cli create my-vue-app -t vue
# 使用默认配置批量克隆
hmf-cli clone
# 克隆指定的几个仓库到 projects 目录
hmf-cli clone -d ./projects -r vue3-ts-template react-ts-template
# 克隆其他用户的仓库
hmf-cli clone -u antfu -r eslint-config utils
FAQs
hmf-cli 一个快捷创建完整模板项目的命令行工具
The npm package hmf-cli receives a total of 22 weekly downloads. As such, hmf-cli popularity was classified as not popular.
We found that hmf-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.