
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
@alviere/ui
Advanced tools
This guide explains how to set up and run the Alviere UI Svelte development server.
Copy the example environment file and fill in your credentials:
cd packages/ui
cp .env.example .env
Edit .env and add your Alviere API credentials:
ALVIERE_CLIENT_ID=your-client-id-here
ALVIERE_CLIENT_SECRET=your-client-secret-here
ALVIERE_ACCOUNT_UUID=your-account-uuid-here
⚠️ IMPORTANT: Never commit the .env file to version control! It contains sensitive credentials.
# From the ui package directory
pnpm run dev:server
# Or from the monorepo root
pnpm --filter @alviere/ui dev:server
The development server will start on http://localhost:8000
pnpm run dev:server - Start the Express development serverpnpm run dev - Start Vite development server (for component development)pnpm run a11y:all - Run the full local accessibility audit toolchainpnpm run a11y:report:generate - Generate consolidated auditor-facing a11y report (HTML/MD/JSON)For VPAT/Section 508 evidence generation, use the local accessibility audit pipeline documented in:
This includes:
vitest-axe)pa11y-ci)For more information on how the dev server is setup see here
| Variable | Required | Default | Description |
|---|---|---|---|
ALVIERE_CLIENT_ID | âś… Yes | - | Your Alviere API client ID |
ALVIERE_CLIENT_SECRET | âś… Yes | - | Your Alviere API client secret |
ALVIERE_ACCOUNT_UUID | âś… Yes | - | Your Alviere account UUID |
ALVIERE_AUTH_URL | No | https://api.dev.alviere.com/v3/auth | Alviere authentication endpoint |
PORT | No | 8000 | Development server port |
⚠️ IMPORTANT: Bear in mind that all subsquent requests will be made to the same environment the auth was made, since, behind the curtains the CORE package will use the key api_domain retrieved from the auth JWT.
To get your Alviere API credentials:
If you see this error, make sure:
.env file in packages/ui/.env file.env file has no typos in variable namesPORT=3000 pnpm run dev:serverpnpm install in the workspace root⚠️ IMPORTANT: Bear in mind that port 8000 is CORS cleared, other ports might not be and if you really need a different port you'll need to contact Alviere as this needs a case-by-case decision and it's based on necessity.
.env file is already in .gitignore and will not be committedFAQs
Alviere JS Svelte UI Components - Lightweight payment components
The npm package @alviere/ui receives a total of 246 weekly downloads. As such, @alviere/ui popularity was classified as not popular.
We found that @alviere/ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.