vue-cli
node-ipc
vue-cli | node-ipc | |
---|---|---|
88 | 76 | |
29,732 | 56 | |
-0.1% | - | |
3.2 | 2.7 | |
4 months ago | 10 months ago | |
JavaScript | JavaScript | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
vue-cli
-
Migrating a Legacy Project from Vue CLI to Vite
Recently, a ticket was added to our sprint with the goal of reducing packages with critical and high vulnerabilities in a legacy project. The task involved migrating a Vue 2 project using Vue CLI as the build tool to Vite.
-
Comparing Frontend Technologies: ReactJS vs VueJS
Ecosystem: Vue's ecosystem is smaller than React's but rapidly growing. The Vue CLI provides a robust tool for project scaffolding and build configuration.
-
Integration of Angular, Vue.js and React with .NET: Creating a Modern Web Experience
Immerse yourself in the official Vue CLI documentation for a deeper understanding.
-
Dependencies Belong in Version Control
Security would be a useful benefit/section to add to this post:
A.) If maintainers of your dependencies edited an existing version.
B.) If your dependencies did not pin their dependencies.
For instance, if you installed vue-cli in May of last year from NPM with --prefer-offline (basically the same as checking in your node_modules), you were fine. But because vue-cli doesn't pin its dependencies ("node-ipc"), installing fresh/online would create WITH-LOVE-FROM-AMERICA.txt on your desktop [1], which was at the very least a scare, but for some, very problematic.
[1] https://github.com/vuejs/vue-cli/issues/7054
-
Creating a Vue 3 Form Repeater Component: A Step-by-Step Guide
Vue CLI documentation: https://cli.vuejs.org/
-
Selecting the Right Dependencies: A Comprehensive Practical Guide
An interesting fact is that this dependency was used in vue-cli.
-
Build complex SPAs quickly with vue-element-admin
Vue CLI 3
-
Upgrade to Vue3 with @vue/compat on Vue CLI project just doesn't work
Open issue for half a year https://github.com/vuejs/vue-cli/issues/7234
-
What is Vue?
Vue CLI (command-line interface), which is used to install and create the main Vue framework libraries and third-party plugins.
-
I made browser extension for bookmarks (Vue 3 + TailwindCSS + IndexedDB)
Is there a reason you've used the old Vue CLI though, with webpack and babel?Imho you're missing a lot not using Vite... npm init vue@latest (create-vue) is the recommended way to scaffold a new Vue app, Vue CLI is in Maintenance Mode
node-ipc
-
gotta admit, gadgetbridge is awesome!
It should be noted that when developers have the ability to upload packages themselves, there is no guarantee that what the user gets corresponds to the source code that is available. The malware in node-ipc is suspiciously absent from the published source repository which has the latest release in 2021. If you were pulling directly from the source code you would not have seen this. This is an issue with npm, not libre software or "open source."
- How far it's fallen. Bring back my dog.
- Any updates on Rust, and node ipc?
- Anonymous Takes Anti-Putin Battle to Russian People with Printer Attack to Disrupt Kremlin's Propaganda
- Embedded Malicious Code in node-ipc
- Commentary on the Node-IPC incident and open source supply chains
-
The authors of node-ipc have pushed malware in an update, which wipes your disk if you happen to have Russian or Belorussian IP address. This affects some large projects like Vue CLI where it is a dependency.
Direct link to the github discussion: https://github.com/RIAEvangelist/node-ipc/issues/233 (many comments have been removed)
-
Sabotage: Code added to popular NPM package wiped files in Russia and Belarus
Actually, to my knowledge, I was the very first person to discover the malware contained in the commit range of 847047cf7f81ab08352038b2204f0e7633449580 -> 6e344066a0464814a27fbd7ca8422f473956a803
- On the Weaponisation of Open Source
- Open Source Maintainer Sabotages Code to Wipe Russian, Belarusian Computers
What are some alternatives?
create-react-app - Set up a modern web app by running one command.
Windows-Sandbox - Disposable, secure and lightweight Windows Desktop Environment
core - 🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
node-ipc-dependencies-list - List of all dependencies affected by node-ipc malicious commit
Vue.js - This is the repo for Vue 2. For Vue 3, go to https://github.com/vuejs/core
create-vue - 🛠️ The recommended way to start a Vite-powered Vue project