
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
react-isomorphic-boilerplate
Advanced tools
This boilerplate would help you build a react/redux/react-router isomorphic/universal web app
This boilerplate would help you build a react/redux/react-router isomorphic/universal web app
Execute yarn
to install.
Run 3 processes to start developing your app:
yarn run build:client:dev:w
: build client side code and watch file change.yarn run build:server:dev:w
: build server side conde and watch file change.yarn start
: nodemon executing dist/server.js
, and only watches on it's change,
--inspect param is given,
you can debug nodejs server on chrome-devtools.then you can visit localhost:3333
.
All development code are built with source map.
Import stdout.js
and define namespace (example), then turn on debug message depends on platform:
localStorage.debug = '*'
in console.DEBUG=*
, see package.json.scripts.start
.In production build, server side log would stay untouched to easily debug by checking log file, and on browser side, all debug message would be removed by remove-debug-loader.
src/assets
.extract-text-webpack-plugin would extract them (font, image) into /dist
with hash key and handle url transform. (so you don't have to worry about cache issue)
On the other hand, node server only serves static files in /dist
which means /src/assets/ files not imported to your code base are not accessible from your web server.
global.scss
in your entry component, or define your own styles for specific entry then import them.style.scss
in containers folder only set styles for react component in the folder of same level, and starts with most root class name of that component. (see src/containers/Home/style.scss)loadData
method in your route to prefetch data needed for SEO. (example)AVA as test runner.
Don't use webpack alias in code base.
mock-require mocks dependencies to make test as independent as possible.
As it's name says, it only support require
, so in your test file, remember you have to require the target testing module, import
does not work.
Also if your testing module is defined in es6 way (export default
), remember to append .default
to get the default export. (see server test for example)
Build your code with:
yarn run build:client:prod
yarn run build:server:prod
and your app is ready to go.
MIT
FAQs
This boilerplate would help you build a react/redux/react-router isomorphic/universal web app
The npm package react-isomorphic-boilerplate receives a total of 7 weekly downloads. As such, react-isomorphic-boilerplate popularity was classified as not popular.
We found that react-isomorphic-boilerplate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.