
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Some true magic about scaffolding a web [backend/front]-end application !
What is it for ? Let's say that every time you start a new project on the same stack, you are doing the same things over and over again. Here is a usecase example:
$ npm initWhy don't you write down those steps in a JSON file once and use it in Scavader each time you want to initialize a new projet ? You can configure this tool to ask you some custom questions and execute some custom commands.
npm install -g @scavader/scavader
or
npm install --save scavader (and adapt the commands futher with ./node_modules/.bin/scavader ...)
Initialize the scaffolding structure: scavader init. This will generate a
scaffold wizard example where you can start working in.
./scaffold/questions to customize your scaffold wizard../scaffold/commands to customize what your scaffold should do.scavader runRun scavader without any arguments to see the help menu. By default,
scavader will initialize and run using the ./scaffold folder name.
Scaffold from built-in project:
$ scavader init [-p projectName] [-d directoryName]
$ scavader run [-d directoryName]
Scaffold a specific built-in project (here the web-application project) and output
to a specific directory:
$ scavader init -p web-application -d myscavader
$ scavader run -d myscavader
Create a basic scaffold and run the wizard
$ scavader init -d myscavader
$ scavader run -d myscavader
Run scaffold wizard using another set of questions (you can create other
question(s) file(s) in the ./scaffold/questions directory and use the -q
option to specify which one to use):
$ scavader run -d myscavader -q secondary_questions
Scavader = require("scavader")
// Question(s) file to use
const questionsFile = "questions";
// Example of scavader using the `./scaffold.example` folder and run the
// questions located in `./scaffold.example/questions/questions.js`
let scavader = new M.Scavader("./scaffold/", "Scavader");
scavader.run(questionsFile).then(result => {
console.log(result);
});
basic: a basic example to demonstrate how scaffold are made.simple-http: A simple and basic HTTP server with a single index.html file.web-application: this will run a wizard asking you things
about the server and client framework you want to use.
Take a look at the ./projects/web-application/questions and
./projects/web-application/commands example that stands in this repository.
The question file is nothing more than a list of questions that have a specific
format. Check the built in projects to have more insights. You should be aware
that the type and choices fields are the same as in the
Inquirer package. You can have all of
them: input, number, confirm, list, rawlist, expand, checkbox, password, editor (as of 2020-03-06).
Go to the Scavader package directory (cd node_modules/scavader) or
download a clone of the project from github.com and run npm install.
npm run demonpm run docScavader means Scaffolder-Invader, this tools was build to quickly scaffold my own projects.
Yves Lange
FAQs
Some true magic about scaffolding a web [backend/front]-end application !
We found that scavader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.