
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@amadeus-it-group/svelvunity
Advanced tools
Welcome to Svelvunity, a Svelte library designed to provide developers with reusable components and utilities to accelerate the development of Svelte applications.
Svelvunity is a library of Svelte web components designed to streamline your development process. With Svelvunity, you can integrate pre-built components into your projects without starting from scratch.
To start using Svelvunity in your project, install Svelvunity by running the following command in your project directory:
npm install @amadeus-it-group/svelvunity
For comprehensive information on each component and how to use it, see the Documentation.
This library supports different versions of Svelte depending on the library version:
Library Version | Compatible Svelte Version |
---|---|
≤ 0.0.3 | 4.x |
≥ 0.0.4 | 5.x |
Import the components you need and start using them in your Svelte application:
<script>
import { Datepicker } from '@amadeus-it-group/svelvunity';
</script>
<Datepicker />
We welcome contributions! Please read our Contribution Guidelines to get started.
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
Reusable components and utilities svelte library.
We found that @amadeus-it-group/svelvunity demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.