Package Health Score

48 / 100

security
Security review needed
popularity
Limited
maintenance
Inactive
community
Active

Explore Similar Packages

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version			Vulnerabilities	License Risk
0.3.50-rc.1	\|	05/2018	0 C 0 H 0 M 0 L	0 H 0 M 0 L
0.2.9	\|	01/2018	0 C 0 H 0 M 0 L	0 H 0 M 0 L
0.1.0	\|	01/2018	0 C 0 H 0 M 0 L	0 H 0 M 0 L
0.0.3	\|	01/2018	0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Limited

Weekly Downloads (39)

GitHub Stars: 6
Forks: 0
Contributors: 460

Direct Usage Popularity

The npm package advanced-react-scripts receives a total of 39 downloads a week. As such, we scored advanced-react-scripts popularity level to be Limited.

Based on project statistics from the GitHub repository for the npm package advanced-react-scripts, we found that it has been starred 6 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 460
Funding: No

A good and healthy external contribution signal for advanced-react-scripts project, which invites more than one hundred open source maintainers to collaborate on the repository.

Embed Package Health Score Badge

Maintenance

Inactive

deprecated

Commit Frequency

No Recent Commits

Open Issues: 0
Open PR: 0
Last Release: 7 years ago
Last Commit: 5 years ago

Further analysis of the maintenance status of advanced-react-scripts based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for advanced-react-scripts is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: >=6

Age: 7 years
Dependencies: 62 Direct
Versions: 115
Install Size: 257 kB
Dist-tags: 2
# of Files: 38
Maintainers: 1
TS Typings: No

advanced-react-scripts has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

🚀 Advanced react-scripts

This repository is fork of react-scripts with fresh dependency packages and simple webpack modifications that can toggle extra features

💡 Features

SASS / Stylus
CSS Modules / SASS Modules / Stylus Modules
Proposal Decorators (i)
Proposal Class Properties (i)
Babel Preset Stage 0 (i)
Customizable CSS Modules Local Ident Name
SVG Loader (makes sprite) (why) (i)
Additional bundle attribute (async|defer|...) (i)
Font Loader (ttf|eot|woff|woff2) (i)

❔ How to use it

If you have existing project created by create-react-app, you can remove default react-scripts

For it, run command:

npm uninstall --save react-scripts or yarn uninstall react-scripts
Next we need install advanced-react-scripts:

npm install --save-dev advanced-react-scripts or yarn add advanced-react-scripts
Then create .env file in the root of project for add any of the configuration options below to enable necessary feature

🔧 Configuration Options

Styling

Preprocessors

Feature	Parameter in .env	Type	At default
SASS	`REACT_APP_SASS`	Boolean	`FALSE`
Stylus	`REACT_APP_STYLUS`	Boolean	`FALSE`

CSS Modules

Feature	Parameter in .env	Need file format	Type	At default
CSS Modules	`REACT_APP_CSS_MODULES`	`[name].module.css`	Boolean	`FALSE`
SASS Modules	`REACT_APP_SASS_MODULES`	`[name].module.(sass/scss)`	Boolean	`FALSE`
Stylus Modules	`REACT_APP_STYLUS_MODULES`	`[name].module.styl`	Boolean	`FALSE`

CSS Modules local ident name

Build Type	Parameter in .env	Type	At default
Development	`REACT_APP_DEVELOPMENT_CSS_MODULES_IDENT_NAME`	String	`[path]__[name]___[local]`
Production	`REACT_APP_PRODUCTION_CSS_MODULES_IDENT_NAME`	String	`[local]-[sha512:hash:base32]`

Fonts

Build Type	Parameter in .env	Type	At default
Font Loader	`REACT_APP_FONT_LOADER`	Boolean	`FALSE`

Example

@font-face {
    font-family: 'Open Sans';
    src: local('Open Sans'),
         local('Open-Sans'),
         url('./../resources/fonts/OpenSans.woff2') format('woff2');
}

Experimental ES features

Presets

Feature	Parameter in .env	Type	At default
Babel Preset Stage-0	`REACT_APP_BABEL_PRESET_STAGE_0`	Boolean	`FALSE`

Single plugins

Feature	Parameter in .env	Type	At default
Proposal Decorators	`REACT_APP_PROPOSAL_DECORATORS`	Boolean	`FALSE`
Proposal Class Properties	`REACT_APP_PROPOSAL_CLASS_PROPERTIES`	Boolean	`FALSE`

Specific loaders

GraphQL

Feature	Parameter in .env	Type	At default
GraphQL Loader	`REACT_APP_GRAPHQL_LOADER`	Boolean	`FALSE`

Official documentation

SVG

Feature	Parameter in .env	Type	At default
SVG Loader (sprite)	`REACT_APP_SVG_SPRITE_LOADER`	Boolean	`FALSE`

Example

import twitterIcon from '../assets/twitter.svg';

console.log(twitterIcon); // output 'sprite-[hash].svg#twitter-usage'

<svg>
  
</svg>

Bundle tweaks

Feature	Parameter in .env	Type	At default
Bundle Attribute	`REACT_APP_BUNDLE_ATTRIBUTE`	String	`null`

NOTE: works only on production build

Future

We follow updates of original react-scripts and changes in used packages

We need help us, community! Everyone can take part in the development and suggest the idea, explained in Issue or make your own changes and send in PR. We have no strict rules for your issues. Any wishes are taken into account =)

Changelog

advanced-react-scripts dependencies

@babel/core @babel/plugin-proposal-class-properties @babel/plugin-proposal-decorators @babel/preset-stage-0 @babel/runtime autoprefixer babel-core babel-eslint babel-jest babel-loader babel-plugin-named-asset-import-fresh babel-preset-react-app-fresh case-sensitive-paths-webpack-plugin chalk css-loader dotenv dotenv-expand eslint eslint-config-react-app-fresh eslint-loader eslint-plugin-flowtype eslint-plugin-import eslint-plugin-jsx-a11y eslint-plugin-react extract-text-webpack-plugin file-loader find-pkg fs-extra glob-all globby graphql graphql-tag html-webpack-plugin identity-obj-proxy jest node-sass loader-utils object-assign postcss-flexbugs-fixes postcss-loader promise raf react-dev-utils-fresh react-error-overlay sass-loader script-ext-html-webpack-plugin style-loader stylus stylus-loader svg-sprite-loader svgo svgo-loader svgr sw-precache-webpack-plugin thread-loader uglifyjs-webpack-plugin url-loader webpack webpack-dev-server webpack-manifest-plugin whatwg-fetch fsevents

advanced-react-scripts development dependencies

react react-dom

FAQs

What is advanced-react-scripts?

CRA & great features without ejecting. Visit Snyk Advisor to see a full health score report for advanced-react-scripts, including popularity, security, maintenance & community analysis.

Is advanced-react-scripts popular?

The npm package advanced-react-scripts receives a total of 39 weekly downloads. As such, advanced-react-scripts popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is advanced-react-scripts well maintained?

We found indications that advanced-react-scripts is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is advanced-react-scripts safe to use?

While scanning the latest version of advanced-react-scripts, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 15 December-2024, at 12:28 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP