
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Rak (React App Kit) is an opinionated skeleton to quickly set up a project with React, Babel, Webpack & friends.
Rak includes and configures the following components to help you build a rock-solid, scalable app with best practices and zero configuration.
stylelint-config-standard)Rak requires Node 20. In addition, to use the automatic AWS deployment features, you'll need both an AWS account and a GitHub account.
Start a new Project with Rak by creating an empty directory and installing rak into it.
mkdir my-new-project
cd my-new-project
Next, run rak using npx. It doesn't take any arguments, and will set up a project using the name of the folder you created as the project name.
npx rak
You can also use the latest master version of rak by running:
npx bjacobel/rak
Some details about your newly created folder structure and dependencies will be printed while Rak is setting up. After it's done, commit your project to git:
git init && git add --all && git commit -m "Initial commit"
and start developing! Your next steps might include:
./config.js.AWS_ACCESS_TOKEN_ID and AWS_SECRET_ACCESS_TOKEN to the Secrets for your repo at https://github.com/[username]/[repo]/settings/secretsSENTRY_AUTH_TOKEN for deploy tracking and sourcemap support in Sentry.CODECOV_TOKENThe offline-caching service worker doesn't play nicely with HMR or webpack-dev-werver, so it's disabled by default. To enable it, you can either build the site in production mode, or use the SW_ENABLE environment variable:
SW_ENABLE=true yarn webpack
You should see LOG from GenerateSW in the output. Don't use this option with WDS (yarn start); you'll kill your browser.
When building flat files locally, its important to serve them with a server that implements a correct 404 redirection behavior. Use:
npx http-server dist -a localhost --proxy http://localhost:8080\?
Rak includes a CloudFormation template that can create & configure all the AWS resources it needs. You'll want to create the CloudFormation stack before you push to your master branch for the first time. To do that:
./config.js, including the name of your project and the domain it'll live at.yarn deploy-utils launch.CloudFormation will create the following resources:
This will take about 30 minutes. While it's going, leaving the yarn deploy-utils launch process running will tail CloudFormation events to your console. You can also log into the AWS Management Console to track the progress of your stack.
Once it's reached the CREATE_COMPLETE status:
ns-xxx.awsdns-xxx.tld) for your new Route53 hosted zone, and point your domain to these nameservers in your registrar's DNS console. These changes may take a while to take effect.master branch. GitHub Actions will test, lint, bundle and deploy your code to S3, and you should see it at your domain shortly.FAQs
Opinionated skeleton to quickly set up a new React app.
We found that rak demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.