
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
typescript-boilerplate-2021
Advanced tools
TypeScript project boilerplate for 2021, with modern tooling. To get started quickly and right-footed for Node.js and browser projects and npm libraries.
Batteries included:
See also the introduction blog post.
package.json
and tsconfig.json
to your likingyarn run
, yarn lint
, yarn test
, yarn build
and yarn ts-node <filename>
.yarn publish
(or npm publish
)You can auto-generate API documentation from the TyoeScript source files using typedoc. The generated documentation can be published to GitHub / GitLab pages through the CI:
yarn add -D typedoc
docs
script to package.json
: "docs": "typedoc --entryPoints src/main.ts"
yarn docs
. The resulting HTML is saved in docs/
..github/workflows/deploy-gh-pages.yml
and enable pages in GitHub repo settings.gitlab-ci.yml
You can use esbuild instead of the default TypeScript compiler (tsc
) to build and bundle the output for node and browsers.
esbuild
is an extremely fast bundler that supports a large part of the TypeScript syntax.
# Install esbuild
yarn add -D esbuild
# Compile and bundle, with cli as entrypoint
./node_modules/.bin/esbuild src/cli.ts --bundle --platform=node --outfile=dist/esbuild/cli.js
# Build for browsers
./node_modules/.bin/esbuild src/browser.ts --bundle --outfile=dist/browser.js
Please post your feedback and/or ideas:
FAQs
Boilerplate for TypeScript projects (Node.js and browser modules)
The npm package typescript-boilerplate-2021 receives a total of 5 weekly downloads. As such, typescript-boilerplate-2021 popularity was classified as not popular.
We found that typescript-boilerplate-2021 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.