
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Minimalist TypeScript package initializer - like npm init, but for TS.
Install globally:
npm i -g ts-init
From now, whenever you want to create a new TypeScript project, just run:
npm init
ts-init
What does it actually do? Well, not a lot! It will:
rm -rf).ts-node. Build files will be also properly declared in your package.json and added to .gitignore.tsconfig.json file with sane defaults: ES6 with the following flags set to true: alwaysStrict, strictNullChecks, noImplicitAny.npm run build - build your projectnpm run ts - run your project with ts-nodesrc/ - your source files, must contain index.ts file.test/ - your test fileses/ - ES6 build using ES moduleslib/ - ES5 build using CommonJS (npm) modules. This directory contains *.d.ts declaration files too.Almost every JavaScript library should be written in TypeScript.
This project is meant to provide everything you need in order to create an npm library (and potentially any other JS project) with modern TypeScript compiler. This way you can use modern ES6 features and static types without any cost.
In the same time, it tries not to force you to use something which is just an opinionated tool. It doesn't include a linter, testing library like Jest or some heavy TS configuration. Everything is kept as minimal as it's possible.
MIT
FAQs
Minimalist TypeScript package initializer - like `npm init`, but for TS
We found that ts-init demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.