Gathering detailed insights and metrics for generator-web-dotfiles
Gathering detailed insights and metrics for generator-web-dotfiles
Configuration files (dotfiles) for web projects.
Installations
npm install generator-web-dotfilesDeveloper Guide
BETA
Typescript
No
Module System
N/A
Node Version
14.19.2
NPM Version
6.14.17
Releases
32
Languages
2
JavaScript
Shell
JavaScript (96.92%)
Shell (3.08%)
Developer
marcol
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
ISC License
3 Stars
231 Commits
1 Watchers
5 Branches
1 Contributors
Updated on Oct 01, 2024
Maintainers
1
Package Meta Information
Latest Version
3.5.3
Package Id
generator-web-dotfiles@3.5.3
Unpacked Size
16.90 kB
Size
6.23 kB
File Count
30
NPM Version
6.14.17
Node Version
14.19.2
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
3
Dev Dependencies
25
@commitlint/cli@commitlint/config-conventionaleslinteslint-config-standardeslint-plugin-filenameseslint-plugin-htmleslint-plugin-importeslint-plugin-jesteslint-plugin-json-formateslint-plugin-markdowneslint-plugin-nodeeslint-plugin-promisehuskyjestlistrorapinstremark-cliremark-lintremark-preset-lint-markdown-style-guiderimrafstring-sanitizeryeoman-assertyeoman-environmentyeoman-test
generator-web-dotfiles
You can use this generator on top of other generators to enforce code standards for js, css, html and markdown. Setup githooks to check linting or run tests when you commit or push and improve the quality of your commit messages with commitlint.
Installing
First install Yeoman:
1yarn global add yo
or
1npm install -g yo
Now install the ultimate generator:
1yarn global add generator-web-dotfiles
or
1npm install -g generator-web-dotfiles
Finally, run and follow the instructions:
1yo web-dotfiles
Options
You can accept all config files and escape the question by using the option
all:
1yo web-dotfiles --all
Features
-
package.jsonautomatic configuration -
ISC license
-
README with name of the project
-
Pre-populated
.gitignore -
NPM configuration
.npmrc -
JavaScript linting through Eslint with standard configuration (
.eslintrc.json,.eslintignore) -
CSS linting through Stylelint with standard configuration (
.stylelintrc.json,.stylelintignore) -
HTML linting through HTMLHint configuration (
.htmlhintrc) -
Markdown linting through Remark with markdown style guide configuration (
.remarkrc.js) -
Commit linting with commitlint configuration (
commitlintrc.js) and husky -
Git commits with husky. Runs lint on commit, runs tests on push. If you haven't initialized a git repository, the githooks won't be installed. First, initialize your git repository
git init. You can always run the generator again to add the hooks or install husky eventsyarn husky installand add the files to run on events e.g.:yarn husky add .husky/pre-commit "yarn lint".
Compatibility
Version 3.x requires yo 4.x
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: ISC License: LICENSE:0
Reason
Found 0/3 approved changesets -- score normalized to 0
Reason
project is archived
Details
- Warn: Repository is archived.
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/marcol/generator-web-dotfiles/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/marcol/generator-web-dotfiles/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/marcol/generator-web-dotfiles/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/marcol/generator-web-dotfiles/publish.yml/main?enable=pin
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
13 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Score
2.8
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More