Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@chronobserver/htmls
Advanced tools
Inspired by HTML templating engines like pug, I got an idea - "Could I make a template engine that uses proper LiveScript code as templates?"
What you see here is the outcome of said idea - a functional (HTML5) templating engine that, as originally visioned, uses proper LiveScript code as its templates.
Word of Warning: While HTMLS is available on npm, keep in mind that it was something put together in a few hours as a fun exercise. As such, you should probably not use it in any kind of serious production and go with something more stable and mature instead.
You can get HTMLS via npm:
$ npm install @chronobserver/htmls
doctype \html
html {lang: \en} ->
head ->
meta charset: \utf8
title @title
meta description: "A silly experiment in templating"
link rel: \stylesheet href: \htmls.css
script {type: "text/javascript"} """
if (javascript === "stinks") {
console.log("You should use LiveScript instead!");
}
"""
body ->
header ->
h1 "HTMLS - HyperText Markup LiveScript!"
main ->
if @using-htmls
p "I see that you are using HTMLS. You must be very brave."
else
p "Maybe you have made a sensible decision after all?"
footer ->
$ "HTMLS, a silly experiment by "
a {href: "https://github.com/Daiz-/"} "Daiz"
Given {title: "HTMLS", usingHtmls: true}
as input, this compiles to:
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf8">
<title>HTMLS</title>
<meta description="A silly experiment in templating">
<link rel="stylesheet" href="htmls.css">
<script type="text/javascript">
if (javascript === "stinks") {
console.log("You should use LiveScript instead!");
}
</script>
</head>
<body>
<header>
<h1>HTMLS - HyperText Markup LiveScript!</h1>
</header>
<main>
<p>I see that you are using HTMLS. You must be very brave.</p>
</main>
<footer>
HTMLS, a silly experiment by <a href="https://github.com/Daiz-/">Daiz</a>
</footer>
</body>
</html>
Usage of HTMLS is quite straightforward. You load the module, you call it with a template string and it spits out a function that you can then use to render said template with any given data. Like so:
// JavaScript
const htmls = require('@chronobserver/htmls');
const templateText = 'p "Hello, #@!"';
const templateFunc = htmls(templateText);
const html = templateFunc('John Smith'); // <p>Hello, John Smith!</p>
# LiveScript
require! \@chronobserver/htmls
template-text = 'p "Hello, #@!"'
template-func = htmls template-text
html = template-func 'John Smith' # <p>Hello, John Smith!</p>
this.
or @
for short.$
function for plain text output inside an element.FAQs
HyperText Markup LiveScript!
The npm package @chronobserver/htmls receives a total of 40 weekly downloads. As such, @chronobserver/htmls popularity was classified as not popular.
We found that @chronobserver/htmls demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.