
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@communities-webruntime/metadata-schema
Advanced tools
Model the shape of your UI in JSON using a unified schema.
This project is currently only used by @communities-webruntime and its corresponding validators.
Metadata-schema validates the shape of different types of JSON metadata for a LWR project.
The current supported schemas include:
base (canonical metadata)communities (declarative metadata)The metadata types include:
brandingroutesthemeviewTo validate against the schema, import the MetadataValidator:
import MetadataValidator from '@communities-webruntime/metadata-schema';
const schema = 'communities'; // name of the schema to validate against
const metadataType = 'routes'; // name of the metadata type
const data = ...;
new MetadataValidator(schema).validate(data, metadataType);
For an example, see metadata-validation.ts.
| Name | Description |
|---|---|
| View | A view on a screen. Also known as a Page. |
| Component | A reusable, composable fragment of UI. This is agnostic to technology, i.e. this could be a LWC component or a reusable HTML element. |
| Region | A part of the view which may contain one or more Components |
| BrandingProperty | A piece of data which stores visual information such as color or font. This is typically a key:value pair |
| Route | A route contains metadata about a URL scheme, or any location specifier |
| Theme | A theme is a complex type which contains metadata about your application's higher-level visuals |
| ThemeLayout | A theme layout is just another name for a view |
For a more detailed rundown of the metadata pieces, see Anatomy of a Communities LWR Template.
/config folder and verifying the impact of your schema change.FAQs
UI metadata schema specs for Lightning Web Runtime
We found that @communities-webruntime/metadata-schema demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.