
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
minecat is a monorepo cli tool for Node.js、React
minecat [命令]
命令:
minecat init init a minecat project with pnpm
minecat add [tpl] [newname] add a module in project
minecat install [package] pnpm add prod dependency to current project
minecat run [script] pnpm run script from current project
选项:
--version 显示版本号 [布尔]
-v, --verbose Run with verbose logging [布尔]
--help 显示帮助信息 [布尔]
$ minecat
$ minecat init
选择 Node.js/React 然后初始化 pnpm project
支持模版
该命令只是首次通过dclone下载仓库到~/.minecat缓存目录下面, 以后再使用的时候,直接从缓存目录进行copy,这样执行效率更高
如果想使用网络下载并更新,minecat init --force即可
$ minecat add
$ minecat add lib yourdir
选择 Node.js/React 然后读 pnpm workspace 的配置,有 packages 就读,没有提示输入。
步骤
$ minecat install debug ms
步骤(此处采用prompts,类似fig,更简单)
为了方便自定义模版,增加minecat config子命令,用法如下。
$ minecat config --list
{
'Node.js': 'https://github.com/npmstudy/your-node-v20-monoreopo-project',
React: 'https://github.com/npmstudy/your-vite-react-monoreopo-project',
}
$ minecat config vue https://github.com/npmstudy/your-node-v20-monoreopo-project
{
'Node.js': 'https://github.com/npmstudy/your-node-v20-monoreopo-project',
React: 'https://github.com/npmstudy/your-vite-react-monoreopo-project',
vue: 'https://github.com/npmstudy/your-node-v20-monoreopo-project',
}
MIT @ npmstudy
FAQs
a monorepo cli tool for Node.js、React
We found that minecat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.