
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
leafwell-providers
Advanced tools
This is an official starter turborepo.
This turborepo uses pnpm as a packages manager. It includes the following packages/apps:
docs: a Next.js appweb: another Next.js appui: a stub React component library shared by both web and docs applicationseslint-config-custom: eslint configurations (includes eslint-config-next and eslint-config-prettier)tsconfig: tsconfig.jsons used throughout the monorepoEach package/app is 100% TypeScript.
This turborepo has some additional tools already setup for you:
This repository is used in the npx create-turbo@latest command, and selected when choosing which package manager you wish to use with your monorepo (pnpm).
To build all apps and packages, run the following command:
cd my-turborepo
pnpm run build
To develop all apps and packages, run the following command:
cd my-turborepo
pnpm run dev
Turborepo can use a technique known as Remote Caching to share cache artifacts across machines, enabling you to share build caches with your team and CI/CD pipelines.
By default, Turborepo will cache locally. To enable Remote Caching you will need an account with Vercel. If you don't have an account you can create one, then enter the following commands:
cd my-turborepo
pnpx turbo login
This will authenticate the Turborepo CLI with your Vercel account.
Next, you can link your Turborepo to your Remote Cache by running the following command from the root of your turborepo:
pnpx turbo link
Learn more about the power of Turborepo:
FAQs
This is an official starter turborepo.
We found that leafwell-providers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.