Gathering detailed insights and metrics for create-exposed-app
Installations
npm install create-exposed-appDeveloper Guide
BETA
Typescript
No
Module System
N/A
Node Version
14.18.2
NPM Version
6.14.15
Score
53.9
Supply Chain
95.3
Quality
75
Maintenance
100
Vulnerability
100
License
Releases
53
v9.0.0
v9.0.0
Updated on Jan 01, 2022
create-exposed-app v8.1.3
v8.1.3
Updated on Mar 13, 2021
create-exposed-app v8.1.2
v8.1.2
Updated on Mar 13, 2021
create-exposed-app v8.1.1
v8.1.1
Updated on Mar 13, 2021
create-exposed-app v8.1.0
v8.1.0
Updated on Mar 13, 2021
create-exposed-app v8.0.1
v8.0.1
Updated on Mar 13, 2021
Contributors
3
Unable to fetch Contributors
Languages
4
EJS
JavaScript
TypeScript
Shell
EJS (77.07%)
JavaScript (13.13%)
TypeScript (6.26%)
Shell (3.54%)
Love this project? Help keep it running — sponsor us today! 🚀
Developer
iamturns
Download Statistics
Total Downloads
13,196
Last Day
1
Last Week
8
Last Month
94
Last Year
1,187
GitHub Statistics
MIT License
405 Stars
170 Commits
62 Forks
4 Watchers
14 Branches
3 Contributors
Updated on Dec 09, 2024
Maintainers
1
Package Meta Information
Latest Version
9.0.0
Package Id
create-exposed-app@9.0.0
Unpacked Size
61.19 kB
Size
21.91 kB
File Count
55
NPM Version
6.14.15
Node Version
14.18.2
Total Downloads
Cumulative downloads
Total Downloads
13,196
Last Day
-50%
1
Compared to previous day
Last Week
60%
8
Compared to previous week
Last Month
-36.5%
94
Compared to previous month
Last Year
-36%
1,187
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
36
@babel/core@babel/preset-env@babel/preset-typescript@commitlint/cli@commitlint/config-conventional@types/debug@types/jest@typescript-eslint/eslint-plugin@typescript-eslint/parserbabel-jestdoctocesbuildeslinteslint-config-airbnb-baseeslint-config-airbnb-typescripteslint-config-prettiereslint-formatter-prettyeslint-plugin-eslint-commentseslint-plugin-importeslint-plugin-jesteslint-plugin-jsx-a11yeslint-plugin-promiseeslint-plugin-reacteslint-plugin-unicorngen-esm-wrapperimport-sort-cliimport-sort-parser-babylonimport-sort-parser-typescriptimport-sort-style-modulejestmarkdownlint-clinpm-run-allprettierrimrafsort-package-jsontypescript
create-exposed-app
App generator with everything exposed for maximum control (powered by TypeScript, ESBuild, Jest, ESLint, GitHub Actions, Prettier, and more)
Like zero-config? Get out!
Generate a flexible starting point for your app, where config files and scripts are in-your-face and ready to adapt to your needs.
Because every app is unique.
Go for it:
1npm init exposed-app
What's included?
- 🏆 Powered by the usual suspects: TypeScript, Jest, ESLint
- 📦 TS → JS, powered by esbuild
- It's so fast! With tree shaking too
- Outputs CJS, ESM, and
d.tsfiles
- 🚀 CI/CD, powered by GitHub Actions
- Publishing, versioning, and changelog generation, powered by Release Please
- Automatically format code, and commit changes back to the repo
- PRs display a code coverage report, powered by Coveralls
- 🎀 Format code, powered by Prettier, EditorConfig, import-sort, sort-package-json, doctoc
- 📚 Documentation templates
- README.md, CHANGELOG.md, CODE_OF_CONDUCT.md, DEVELOPING.md, MAINTAINING.md, and LICENSE
- GitHub templates for PRs and issues
- Architectural Decision Records
- 🎉 More!
Setup
1npm install @iamturns/create-exposed-app
Usage
Run the following command and follow the prompts:
1npm init exposed-app
You can also invoke the app with arguments. For example:
1npx create-exposed-app \ 2 --packageName="my-awesome-project" \ 3 --npmScope="@example" \ 4 --oneLiner="Does awesome stuff" \ 5 --authorName="Bruce Wayne" \ 6 --authorEmail="bruce.wayne@gmail.com" \ 7 --authorGithub="batman" \ 8 --authorTwitter="TheRealBatman" \ 9 --authorWebsite="https://batman.com"
Credits
This project is authored and maintained by Matt Turnbull (iamturns.com / @iamturns).
A big thank you to all contributors 🏆
License
Open-source under MIT License.
FAQ
- Uh oh, something went wrong!
- I wish something was different…
- Can I contribute code?
- My question isn't answered :(
Uh oh, something went wrong!
Sorry about that. Please submit a bug report using the GitHub issue tracker.
I wish something was different…
Keen to hear all ideas in GitHub discussions.
Can I contribute code?
Yes please! See DEVELOPING.md.
My question isn't answered :(
Ask away in GitHub discussions.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
dependency not pinned by hash detected -- score normalized to 4
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coveralls.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/coveralls.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coveralls.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/coveralls.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/coveralls.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/coveralls.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/formatter.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/formatter.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/formatter.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/formatter.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/formatter.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/formatter.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-branch.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/push-branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-branch.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/push-branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-master.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/push-master.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-master.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/push-master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-master.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/push-master.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-master.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/iamturns/create-exposed-app/push-master.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: bin/manual-test.sh:21
- Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 4 third-party GitHubAction dependencies pinned
- Info: 4 out of 5 npmCommand dependencies pinned
Reason
Found 0/6 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/coveralls.yml:1
- Warn: no topLevel permission defined: .github/workflows/formatter.yml:1
- Warn: no topLevel permission defined: .github/workflows/push-branch.yml:1
- Warn: no topLevel permission defined: .github/workflows/push-master.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 25 are checked with a SAST tool
Reason
19 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q
- Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Score
2.8
/10
Last Scanned on 2025-02-10
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More