
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Rewire your React app for react-scripts(-ts) support
This tool attempts to reconfigure your ejected Create React App project to pull back in all the glory it once had. Additionally, if you have ejected with react-scripts-ts, TypeScript support will be re-enabled. Note that all your ESLint, TSLint, Babel and webpack configurations will be overrided and get replaced with react-scripts' internal configurations. This also comes with the fact that uneject cannot be used on a custom webpack configuration except that they will be overrided too.
However, if you want to edit the webpack configurations without ejecting or creating a fork of react-scripts, checkout rescripts (personally recommended), react-app-rewired (unmaintained since Create React App 2.0+, check this fork).
As a matter of fact, uneject supports all versions of Create React App.
unejectI accidentally ejected my Create React App project. Please don't ask me how.
You ran npm run eject or yarn eject.
You want to still retain react-scripts(-ts) and hide away those pesky webpack configurations.
Install uneject globally (recommended) with:
$ npm install -g uneject
# or with Yarn,
$ yarn global add uneject
Alternatively, you can use npx to install and run it locally. After installing, proceed with running uneject in the root directory of your project.
Make sure you did not edit the webpack configurations in the config/ directory after you have ejected. If you did edit those configuration files, they will be lost without condition.
For react-scripts-ts, use uneject ts at the root of your project.
Note: You need to commit and stash your changes before ejecting multiple times.
This project would not have been without these wonderful people:
FAQs
Rewire your React app for react-scripts(-ts) support
We found that uneject demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.