---
package: "@webjsdev/cli"
version: 0.10.0
date: 2026-06-01T12:00:00+05:30
commit_count: 2
---
## Features

- **`webjs vendor` command surface for importmap pinning** ([#105](https://github.com/webjsdev/webjs/pull/105)) [`4db2360`](https://github.com/webjsdev/webjs/commit/4db2360)
  Brings Rails `importmap-rails` parity to the CLI. `webjs vendor pin [pkg]`
  resolves bare npm specifiers and writes them to a committed
  `.webjs/vendor/importmap.json`, with `unpin` / `list` to manage it.
  `--from <provider>` selects the CDN (`jspm` default, plus `jsdelivr`,
  `unpkg`, `skypack`) and persists the choice in the pin file so later
  `update` runs stay on the same CDN. `webjs vendor audit` checks pinned
  versions against the npm security-advisory endpoint and exits non-zero on
  any CVE; `webjs vendor outdated` lists pinned packages trailing their
  registry `latest`; `webjs vendor update` re-resolves the outdated set.
  `--download` caches the bundles under `.webjs/vendor/` for offline serving.

- **direct jspm.io vendor resolution (Rails-style no-build)** ([#89](https://github.com/webjsdev/webjs/pull/89)) [`988b37b`](https://github.com/webjsdev/webjs/commit/988b37b)
  Adds the first `webjs vendor pin` path and the scaffold wiring behind it,
  resolving npm dependencies to CDN URLs at serve time with no bundler, so a
  freshly scaffolded app can pin its vendor dependencies out of the box.
