handlebars-helpers
rfcs
Our great sponsors
| handlebars-helpers | rfcs | |
|---|---|---|
| 6 | 35 | |
| 2,191 | 716 | |
| 0.7% | 0.6% | |
| 0.0 | 5.6 | |
| 3 months ago | 2 days ago | |
| JavaScript | JavaScript | |
| MIT License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
handlebars-helpers
-
@lrvick bought the expired domain name for the 'foreach' NPM package maintainer. He now controls the package which 2.2m packages depend on.
https://www.npmjs.com/package/handlebars-helpers, if anyone is curious.
- Node.js packages don't deserve your trust
- NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised
- BREAKING!! NPM package ‘ua-parser-js’ with more than 7M weekly download is compromised
-
wait what!?
The biggest project that still depends on it is handlebars-helpers, which accounts for about half of the daily downloads. The other half are probably from installs of old versions of other libraries.
-
SBCL: New in Version 2.1.0
I am actually using handlebars along with helpers https://github.com/helpers/handlebars-helpers to automatically generate sql, golang, json and jsx. cl-who is only for markup.
rfcs
-
Yarn 4.0
npm workspaces plus Wireit works far better than Lerna, in my experience.
https://github.com/google/wireit
Wireit's ability to specify actual script dependencies, do caching (and on Github actions), and it's long-running service script support make it much more useful and comprehensive than Lerna.
I agree that this should be built into npm. There's an RRFC for it here: https://github.com/npm/rfcs/issues/706
-
NPM vs Yarn?
It's coming https://github.com/npm/rfcs/blob/main/accepted/0042-isolated-mode.md
-
How do you know that the .exe or .apk file for an open source software on github is actually compiled from the viewable source code?
This just got accepted as a proposal in NPM: https://github.com/npm/rfcs/pull/626
-
Why aren't Node.js package managers interoperable?
npm also plans to support pnpm-style node_modules
-
Axios shipped a buggy version and it broke many productions apps. Let this be a lesson to pin your dependencies!
(I usually end up removing npm ci from CI/CD since I think it is way too slow and want to cache node_modules from previous builds; I'm waiting for https://github.com/npm/rfcs/issues/415 to land to make this fail-safe npm install --from-lockfile. Yarn does support this already)
- How to run multiple NPM commands simultaneously using concurrently
- [RRFC] Parallel script execution when value is set to an array of text. · Issue #610 · npm/rfcs
- Lerna has gone. Which Monorepo is right for a Node.js BACKEND now?
- NPM introduces a new Dependency Selector Syntax
-
How to respond to growing supply chain security risks?
I started following this problem from the discussion at npm about making install scripts opt-in. But install scripts are not the only threat, there are more ways for malicious actors:
What are some alternatives?
deno-puppeteer - A port of puppeteer running on Deno
vm2 - Advanced vm/sandbox for Node.js
koa-hbs - Handlebars templates for Koa.js
pnpm - Fast, disk space efficient package manager
regex - An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs.
corepack - Zero-runtime-dependency package acting as bridge between Node projects and their package managers
deno - A modern runtime for JavaScript and TypeScript.
Cargo - The Rust package manager
NUnit - NUnit Framework
GHSA-g2q5-5433-rhrf
lodash - A modern JavaScript utility library delivering modularity, performance, & extras.
feedback - Public feedback discussions for npm