
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@app-config/electron
Advanced tools
Exposes app-config values to Electron render processes
Easily inject app-config
values into Electron renderer processes. An example project is provided here.
yarn add @app-config/main @app-config/electron
Or, if you use NPM.
npm i @app-config/main @app-config/electron
app.whenReady().then(() => {
loadConfig().then(() => {
const mainWindow = new BrowserWindow();
mainWindow.loadFile('./index.html')
});
});
BrowserWindow
webPreferences
Pass your config and optionally any other BrowserWindow
webPreferences
you need to addAppConfigPreload
.
app.whenReady().then(() => {
loadConfig().then(() => {
const mainWindow = new BrowserWindow({
webPreferences: addAppConfigPreload(config),
});
mainWindow.loadFile('./index.html')
});
});
They can be found in window._appConfig
or in config
if using @app-config/main
in your web page (when using @app-config/webpack
with headerInjection
or @app-config/vite
with readGlobal
). It's also available in config
in the main Electron process.
Your app will need to be restarted to reflect any configuration changes.
Setting contextIsolation
to true
in the browserOptions
of your BrowserWindow
settings is required for this package to work. We set this for you, but if your app requres contextIsolation
to be false
using this package will break your app.
FAQs
Exposes app-config values to Electron render processes
The npm package @app-config/electron receives a total of 27 weekly downloads. As such, @app-config/electron popularity was classified as not popular.
We found that @app-config/electron demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.