
Security Fundamentals
Turtles, Clams, and Cyber Threat Actors: Shell Usage
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Peace of mind from prototype to production.
See the official site at https://www.phoenixframework.org/.
Install the latest version of Phoenix by following the instructions at https://hexdocs.pm/phoenix/installation.html#phoenix.
Phoenix requires Elixir v1.11+ & Erlang v22.1+.
API documentation is available at https://hexdocs.pm/phoenix.
Phoenix.js documentation is available at https://hexdocs.pm/phoenix/js.
We appreciate any contribution to Phoenix. Check our CODE_OF_CONDUCT.md and CONTRIBUTING.md guides for more information. We usually keep a list of features and bugs in the issue tracker.
You can create a new project using the latest Phoenix source installer (the phx.new
Mix task) with the following steps:
phx_new
archives so that Mix will pick up the local source code. This can be done with mix archive.uninstall phx_new
or by simply deleting the file, which is usually in ~/.mix/archives/
.git clone https://github.com/phoenixframework/phoenix
or by downloading itphx.new
Mix task from within the installer
directory, for example:cd phoenix/installer
mix phx.new dev_app --dev
The --dev
flag will configure your new project's :phoenix
dep as a relative path dependency, pointing to your local Phoenix checkout:
defp deps do
[{:phoenix, path: "../..", override: true},
To create projects outside of the installer/
directory, add the latest archive to your machine by following the instructions in installer/README.md
To build the documentation from source:
npm install --prefix assets
MIX_ENV=docs mix docs
To build Phoenix from source:
mix deps.get
mix compile
To build the Phoenix installer from source:
mix deps.get
mix compile
mix archive.build
cd assets
npm install
Visit Phoenix's sponsor, DockYard, for expert Phoenix Consulting
Copyright (c) 2014, Chris McCord.
Phoenix source code is licensed under the MIT License.
FAQs
The official JavaScript client for the Phoenix web framework.
The npm package phoenix receives a total of 154,736 weekly downloads. As such, phoenix popularity was classified as popular.
We found that phoenix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Security News
At VulnCon 2025, NIST scrapped its NVD consortium plans, admitted it can't keep up with CVEs, and outlined automation efforts amid a mounting backlog.
Product
We redesigned our GitHub PR comments to deliver clear, actionable security insights without adding noise to your workflow.