
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
npm install mkapp --save
Install the command line tools globally with npm install mkapp-cli -g
Alternatively, if installed locally, set an environment alias alias mkapp='node ./node_modules/.bin/mkapp' to use from the command line without installing the cli.
===
mkapp new
./srcmkapp go or mkapp dev
dev/ using babeldev/publicdev/adminlocalhost:<port>/applocalhost:<port>/admin<port>src/public and reloads localhost:<port>/app when files changesrc/admin and reloads localhost:<port>/admin when files changenodemon process to restart the server when api files, middleware files, or index.js are changed<port> is 3030, override it in your app's mkapp_config.jsonsee the MkappTheme Documentation
mkapp dist
dist/ using babeldist/publicdist/admin===
root/
|-- package.json
|-- mkapp_config.json
|-- .gitignore
|-- .eslintrc
|-- node_modules/
|-- dist/ (compiled and compressed app files, tracked in git)
|-- dev/ (compiled app files, not tracked in git)
|-- src/
|-- server/
|-- index.js
|-- middleware/
|-- api/
|-- v1.0/
|-- index.js
|-- condux/ ( websocket nexus, [see condux package](https://github.com/epferrari/condux) )
|-- admin/
|-- index.js
|-- actions.js
|-- constants.js
|-- frequencies/
|-- public/
|-- index.js
|-- actions.js
|-- constants.js
|-- frequencies/
|-- server
|-- index.js
|-- adminAppActions.js
|-- publicAppActions.js
|-- channels/
|-- public/
* See Below *
|-- admin/
* See Below
|-- modules/
(empty by default, a place for code packages tightly coupled around a single concern with files to be imported public, admin, and server)
/
|-- index.html
|-- actions/
|-- index.js
|-- assets/
|-- img/
|-- fonts/
* Roboto fonts
* Font-Awesome fonts
|-- components/ (ex. ComponentA.jsx, ComponentB.jsx)
|-- contexts/
|-- appContext.jsx
|-- datastores/
|-- AppState.js
|-- less/
|-- main.less
|-- components/ (ex. ComponentA.less, ComponentB.less)
|-- lib/
|-- fonts.less
|-- app.less
|-- material-ui-fonts.less
|-- react-css-transition-groups/
|-- views/
|-- Home.jsx
FAQs
A CLI build tool for React + Condux
We found that mkapp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.