
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
An extremely simple, pluggable static site generator.
In Hutools, all of the logic is handled by plugins. You simply chain them together.
Here's what the simplest blog looks like:
const Hutools = require('hutools')
const layouts = require('@hutools/layouts')
const markdown = require('@hutools/markdown')
Hutools(__dirname)
.use(markdown())
.use(layouts())
.build(function (err) {
if (err) throw err
console.log('Build finished!')
})
NPM:
npm install hutools
Yarn:
yarn add hutools
What if you want to get fancier by hiding unfinished drafts, grouping posts in collections, and using custom permalinks? Just add plugins...
const Hutools = require('hutools')
const collections = require('@hutools/collections')
const layouts = require('@hutools/layouts')
const markdown = require('@hutools/markdown')
const permalinks = require('@hutools/permalinks')
Hutools(__dirname)
.source('./src')
.destination('./build')
.clean(true)
.frontmatter({
excerpt: true
})
.env({
NAME: process.env.NODE_ENV,
DEBUG: '@hutools/*',
DEBUG_LOG: 'hutools.log'
})
.metadata({
sitename: 'My Static Site & Blog',
siteurl: 'https://example.com/',
description: "It's about saying »Hello« to the world.",
generatorname: 'Hutools',
generatorurl: 'https://hutools.io/'
})
.use(
collections({
posts: 'posts/*.md'
})
)
.use(markdown())
.use(
permalinks({
relative: false
})
)
.use(layouts())
.build(function (err) {
if (err) throw err
})
Hutools works in three simple steps:
Each plugin is invoked with the contents of the source directory, and each file can contain YAML front-matter that will be attached as metadata, so a simple file like...
---
title: A Catchy Title
date: 2021-12-01
---
An informative article.
...would be parsed into...
{
'path/to/my-file.md': {
title: 'A Catchy Title',
date: <Date >,
contents: <Buffer 7a 66 7a 67...>,
stats: {
...
}
}
}
...which any of the plugins can then manipulate however they want. Writing plugins is incredibly simple, just take a look at the example drafts plugin.
Of course they can get a lot more complicated too. That's what makes Hutools powerful; the plugins can do anything you want!
A Hutools plugin is a function that is passed the file list, the hutools instance, and a done callback. It is often wrapped in a plugin initializer that accepts configuration options.
Check out the official plugin registry at: https://hutools.io/plugins.
Find all the core plugins at: https://github.com/search?q=org%3Ahutools+hutools-plugin
See the draft plugin for a simple plugin example.
Check out the full API reference at: https://hutools.io/api.
In addition to a simple Javascript API, the Hutools CLI can read configuration from a hutools.json file, so that you can build static-site generators similar to Jekyll or Hexo easily. The example blog above would be configured like this:
hutools.json
{
"source": "src",
"destination": "build",
"clean": true,
"metadata": {
"sitename": "My Static Site & Blog",
"siteurl": "https://example.com/",
"description": "It's about saying »Hello« to the world.",
"generatorname": "Hutools",
"generatorurl": "https://hutools.io/"
},
"plugins": [
{ "@hutools/drafts": true },
{ "@hutools/collections": { "posts": "posts/*.md" } },
{ "@hutools/markdown": true },
{ "@hutools/permalinks": "posts/:title" },
{ "@hutools/layouts": true }
]
}
Then run:
hutools
# Hutools · reading configuration from: /path/to/hutools.json
# Hutools · successfully built to: /path/to/build
Options recognised by hutools.json are source, destination, concurrency, metadata, clean and frontmatter.
Checkout the static site, Jekyll examples to see the CLI in action.
If you want to use a custom plugin, but feel like it's too domain-specific to be published to the world, you can include plugins as local npm modules: (simply use a relative path from your root directory)
{
"plugins": [{ "./lib/hutools/plugin.js": true }]
}
We often refer to Hutools as a "static site generator", but it's a lot more than that. Since everything is a plugin, the core library is just an abstraction for manipulating a directory of files.
Which means you could just as easily use it to make...
Use debug to debug your build with export DEBUG=hutools-*,@hutools/* (Linux) or set DEBUG=hutools-*,@hutools/* for Windows.
Use the excellent hutools-debug-ui plugin to get a snapshot UI for every build step.
Hutools 2.5.x supports NodeJS versions 12 and higher.
Hutools 2.4.x supports NodeJS versions 8 and higher.
Hutools 1.0.0 and below support NodeJS versions all the way back to 0.12.
Special thanks to Ian Storm Taylor, Andrew Meyer, Dominic Barnes, Andrew Goodricke, Ismay Wolff, Kevin Van Lierde and others for their contributions!
FAQs
An extremely simple, pluggable static site generator.
We found that hutools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.