Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Easy way to start your new react component. React-init is a cli for generating small and reusable react components.
Install it globally:
npm install react-init -g
And then type:
react-init Carousel
It will create a new component called Carousel. :)
This template provides everything you need to start developing and testing your new component. Including:
npm install react-init -g
react-init YourComponentName
/ capital case for component namescd yourcomponentname
// lowercase for foldersnpm install
gulp dev
Ps.: npm install
will take ~3 minutes. Mostly because of the many dependencies nedeed for es6/7 capabilities. I'm still investigating if I can make it faster.
npm run release
You will find some .dotfiles in the root of this project. Those are the settings for all the tools we are using and they are shared between npm, gulp and the services we are using. Be mindful changing it.
File | Description |
---|---|
.babelrc | babel settings |
.editorconfig | code style configs |
.eslintrc | linting settings |
.travis.yml | ci settings for travis |
After pushing your repo to bitbucket or github, go to travis-ci, link and enable your new repo to be built. Your next git push will trigger the build.
Go to coveralls, get a token and enable your repo for coverage. Then go back to travis and add your token as an environment variable. Your next build will trigger coverage.
Task | Description |
---|---|
default | |
clean | remove generated folders |
dev | runs everything you need and keep watching for changes |
lint | lint js files |
build | clean and build the project |
re-build | build changed files |
tests | run the tests |
watch | watch for file changes to perform needed actions |
Task | Description |
---|---|
postinstall | |
start | |
lint | lint js files |
build | build the project |
test | run the tests |
tdd | run the tests and keep watching |
coverage | collect coverage from the tests |
coveralls | sends coverage reports to coveralls |
prerelease | run tests, linting and build prior to release |
release | bump npm version, push to git and publish to npm |
Pull Requests welcome!
FAQs
React init - command line interface for generating react components
The npm package react-init receives a total of 7 weekly downloads. As such, react-init popularity was classified as not popular.
We found that react-init demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.