
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Static Site Generator for The Rest of Us
Kulfon /kuːl fəʊn/ is a one command, JavaScript static site generator inspired by Hugo. It combines data sources with templates to tranform them into HTML pages at once. It supports Nunjucks, Markdown and Org Mode out-of-the-box.
This software is still under active development and not feature complete or ready for consumption by anyone other than software developers.
- Kulfon, Kulfon, co z Ciebie wyrośnie ?! martwię się już od tygodnia!
- Przestań!
While you're hesitating, listen to this wonderful Kulfon song!
There is a ton of static site generators out there. Here are few points to convince you to try Kulfon
npm install -g kulfon
Once Kulfon is installed, you will have access to the kulfon command.
First, let's create a new project:
kulfon new <my-project-name>
Now enter the directory
cd <my-project-name>
and run kulfon's server
kulfon serve
It creates public directory with compiled content (this directory should be
ignored). Go to http://localhost:3000 to check your website.
For more commands, just type
kulfon
Visit Getting Started for more.
Kulfon keeps track of the upcoming fixes and features on GitHub Projects: Kulfon Roadmap
If your website is using Kulfon, feel free to make a PR to add it to this list; please add the new entries at the top.
We use Github Issues for managing bug reports and feature requests. If you run into problems, please search the issues or submit a new one here: https://github.com/kulfonjs/kulfon/issues
Detailed bug reports are always great; it's event better if you are able to include test cases.
FAQs
Kulfon is a modern static site generator written in JavaScript.
The npm package kulfon receives a total of 34 weekly downloads. As such, kulfon popularity was classified as not popular.
We found that kulfon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.