Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@binyamin/eleventy-preact
Advanced tools
An Eleventy plugin for rendering JSX/TSX as HTML, with Preact
A personal Eleventy plugin for rendering JSX/TSX as HTML, with Preact.
Add the plugin to your eleventy config, like so:
const eleventyPreact = require("@binyamin/eleventy-preact");
module.exports = function(eleventyConfig) {
eleventyConfig.addPlugin(eleventyPreact, {
/* options */
});
}
boolean
) - Determines whether to add a doctype (<!DOCTYPE HTML>
) before the rendered HTML. The doctype is never applied to JSX rendered via the shortcode.string
or false
) - This will register a shortcode with the given name, which renders a JSX file in-place. Setting it to false
disables the shortcode. The shortcode takes two parameters. The first is a file path, relative to the includes
directory. The second is an object, passed as props.These are the default options:
{
doctype: true,
shortcode: "render_jsx"
}
All input is welcome; feel free to open an issue. Please remember to be a mensch. If you want to program, you can browse the issue list.
All source-code is provided under the terms of the MIT license. Copyright 2022 Binyamin Aron Green.
FAQs
An Eleventy plugin for rendering JSX/TSX as HTML, with Preact
We found that @binyamin/eleventy-preact demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.