
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Is a simple compiler for Vue.js Single File Components. I love this framework because of its simplicity. I also love the fact that it only needs a single script tag to start hacking!
I wanted to use SFC, but the only solutions to compile those files was through Babel. I don't want to install 200MB of deps on my laptop. I don't want to use Webpack or Browserify. I don't want to write 500+ SLOC configuration files. I don't need ES6, ES2015, TypeScript, ... I want to be able to read the generated file, and I don't need any optimizations I do not decide to include.This comment on Reddit is a good explanation of what I wanted to achieve.
The tool is really basic and do not support a bunch of things. Styles (scoped or not) will not be copied at this moment.
# install the cli
npm install -g vuecc
# just compile your files to javascript
vuecc component-1.vue component-2.vue > components.js
Simple Vue file foo.vue:
<template>
<div class="container">
<p class="hello">{{foo.text}}</p>
</div>
</template>
<script>
module.exports = {
props: ['foo']
}
</script>
Compile to something as simple as this:
Vue.component("foo", {
template: '<div class="container"><p class="hello">{{foo.text}}</p></div>',
props: [ "foo" ]
});
FAQs
A simple compiler for Vue Single File Components
We found that vuecc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.