You can create a new project using
@pota/create
.
npm init @pota -- --template muban
or use the
muban
combination, for the recommended setup
npm init @pota muban
This project follows the Media.Monks Frontend Coding Standards.
In order to mitigate NPM supply chain attacks by best effort the NPM ignore-scripts setting is enabled by default. This project comes with a preconfigured set of dependencies that are allowed to run installation scripts.
After running npm install
it is required to run npm run postinstall
to run required installation scripts from dependent packages.
When adding a new dependency that requires an installation script to run make sure to add that package to the project package.json
in the postinstall
property.
Important: After running
npm install
ornpm ci
always runnpm run postinstall
afterwards before running other scripts.
Documentation on the muban-template
and muban-webpack-scripts
can
be found on https://mubanjs.github.io/muban-skeleton/.
Content Security Policy (CSP)
This application has been build with a strict content security policy. To enforce this policy add the following CSP header to the request response.
Content-Security-Policy: script-src 'sha256-+OVgFCkyF2/rZ6qyfsNnIisCRI6dtMZw3w0Y4xiYagw=' 'strict-dynamic' https: 'unsafe-inline'; object-src 'none'; base-uri 'none';