
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
make-sample
Advanced tools
Utility to easily create sample modules/projects/apps based on hints from existing modules.
yarn global add make-sample
OR
npm i g make-sample
Note The package installs the same executable under the aliases ms and
make-sample.
ms myproject mybase
This will create a new template project in the directory ./myproject loading
up the sample code in mybase but preserving your project name and a base
version.
If you create files (including a package.json) in a directory called sampleapp of your module, that code will get copied to the new templated sample. The exeption is package.json, for which the author, version and name will not get rebased.
This is probably the easiest way to get started.
All you need to do is specify this project using usual npm syntax (e.g. path, URI, github reference, NPM package name) and it will work. Example:
ms rnas rhdeck/react-native-arkit-sample
Edit your package.json for this. Example here.
"name":"Hithere",
"sampleApp":{"module":"rhdeck/react-native-arkit-sample"},
...
Then you get the benefits of simple pointing with the isolation of your sample in a separate application!
If you want your sample code elsewhere in your tree, specify the path member of sampleApp instead:
"name":"Hithere",
"sampleApp":{"path":"sampleapp"}
This seems more a corner case, but here to cover the corners!
When you install your app, there will be five phases:
See react-native-sample for
examples of how you can use preInstall and postInstall to take care of setup and
preparation for use. In that case, it initializes the react-native "hello world"
project in pre-install, so your override application code goes on top of it, and
runs react-native link on the back, to take care of any native modules that
got installed in the course of building the sample.
FAQs
create sample app from within this app
The npm package make-sample receives a total of 0 weekly downloads. As such, make-sample popularity was classified as not popular.
We found that make-sample demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.