
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@aspicio/vue
Advanced tools
Vue 3 bindings for the
Aspicio DXF viewer —
thin veneers over the framework-neutral
@aspicio/elements web components, so Vue, React,
Svelte, and plain-HTML embeds share one implementation and one look
(pixel-identical, verified).
npm install @aspicio/vue vue three # @aspicio/core and @aspicio/elements come along; vue 3.4+ and three (>=0.184) are peers
<DxfEmbed> — batteries included: layer list + interactive preview in
one component.<DxfPreview> — the embeddable canvas alone: pan/zoom/rotate (mouse
and multi-touch), animated fit, batched WebGL rendering. No chrome.
Bind @hover-layer to hit-test the layer under the cursor.<DxfLayerPanel> — the ready-made layer list, identical to the demo
app: header with layer count, visibility checkboxes, effective-color
swatches, entity counts, hover-to-highlight, double-click-to-solo
(with a banner), and a gesture-hints footer. theme="none" renders a
minimal list.<script setup>
import { DxfEmbed } from "@aspicio/vue";
const onLoaded = ({ layers, stats }) => console.log(stats.entityCount);
</script>
<template>
<!-- src also accepts File | Blob | ArrayBuffer | DXF text via :src -->
<DxfEmbed src-url="/drawing.dxf" style="height: 480px" @loaded="onLoaded" />
</template>
Props: src, src-url, panel (left | right | none), theme
(aspicio | none), panel-style, options, show-download,
shortcuts. Emits: loaded, load-error, viewer-change,
hover-layer — payloads arrive unwrapped (no CustomEvent.detail
digging).
The template ref exposes the complete DxfViewer — fitView, zoomBy,
setLayerVisible, pickLayer, view, toSVG, toPNG:
<script setup>
import { shallowRef, useTemplateRef } from "vue";
const embed = useTemplateRef("embed");
const fit = () => embed.value?.viewer?.fitView();
</script>
<template>
<DxfEmbed ref="embed" src-url="/drawing.dxf" />
</template>
Prefer shallowRef when storing the viewer from @viewer-change —
the components unwrap reactive proxies defensively, but a deeply
reactive viewer buys nothing and costs proxy overhead.
Compose DxfPreview + DxfLayerPanel yourself and hand the panel the
viewer from @viewer-change; reverse-highlight-layer wires
canvas-hover to the row highlight (the embed does this automatically).
The internals render in shadow DOM. Theme through --aspicio-* CSS
custom properties and ::part() hooks — see the
@aspicio/elements README for the token and part
list. The theme uses IBM Plex font stacks but never loads webfonts
itself; load IBM Plex Sans/Mono in your page for the exact demo look.
src / src-url loads the new document; the most recently
set source wins, and stale in-flight loads are ignored.shortcuts keys are scoped to the focused embed (click it first):
F fit, +/- zoom, R reset rotation, A show all layers.apps/vue-example for a
full setup.FAQs
Vue 3 bindings for the Aspicio DXF and PDF viewer.
The npm package @aspicio/vue receives a total of 30 weekly downloads. As such, @aspicio/vue popularity was classified as not popular.
We found that @aspicio/vue demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.