
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
reverse-polarity
Advanced tools
👩🏻💻 Developer Ready: A comprehensive template. Works out of the box for most Node.js projects.
🏃🏽 Instant Value: All basic tools included and configured:
🤲 Free as in speech: available under the APLv2 license.
This project is intended to be used with the latest Active LTS release of Node.js.
To start, just click the Use template link (or the green button). Start adding your code in the src and unit tests in the __tests__ directories.
To clone the repository, use the following commands:
git clone https://github.com/jsynowiec/node-typescript-boilerplate
cd node-typescript-boilerplate
npm install
Download and unzip the current main branch or one of the tags:
wget https://github.com/jsynowiec/node-typescript-boilerplate/archive/main.zip -O node-typescript-boilerplate.zip
unzip node-typescript-boilerplate.zip && rm node-typescript-boilerplate.zip
clean - remove coverage data, Jest cache and transpiled files,prebuild - lint source files and tests before building,build - transpile TypeScript to ES6,build:watch - interactive watch mode to automatically transpile source files,lint - lint source files and tests,test - run tests,test:watch - interactive watch mode to automatically re-run testsVolta’s toolchain always keeps track of where you are, it makes sure the tools you use always respect the settings of the project you’re working on. This means you don’t have to worry about changing the state of your installed software when switching between projects. For example, it's used by engineers at LinkedIn to standardize tools and have reproducible development environments.
I recommend to install Volta and use it to manage your project's toolchain.
Writing unit tests in TypeScript can sometimes be troublesome and confusing. Especially when mocking dependencies and using spies.
This is optional, but if you want to learn how to write JavaScript tests for TypeScript modules, read the corresponding wiki page.
Support this project by becoming a sponsor.
Licensed under the APLv2. See the LICENSE file for details.
FAQs
Utility Scripts
We found that reverse-polarity demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.