Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@compositor/gen
Advanced tools
Compositor JSX static site generator
npm i @compositor/gen -g
Export a static site:
gen . --out-dir dist
Run in development mode:
gen . --dev
Given a folder structure like the following:
dist/
src/
about.jsx
index.jsx
lab.json
theme.json
Running gen src --out-dir dist
will create HTML files:
dist/
about/
index.html
index.html
Gen will load theme.json
and lab.json
files in the target directory and import Lab components.
Any files ending with .jsx
or .md
will be used to create pages.
Markdown and JSX files can include front-matter for setting page-level attributes,
such as title and description, and also be passed to the page component as props.
Example JSX file
---
title: Hello World
description: This is a demo page
---
<Box px={3} py={4}>
<Heading>{props.title}</Heading>
</Box>
<CustomLabComponent
description={props.description}
/>
All front matter is passed to the JSX file as a props
object.
Additionally, page-level metadata can be set using the following properties:
title
page titledescription
page descriptionog
object of open graph datatwitter
object of Twitter card datastylesheets
array of stylesheet URLs to add as links in the headscripts
array of JavaScript strings to include before the closing body tagWhen rendering markdown files, Gen will look for a layout
property in front-matter. If a JSX file with the same name is found, it will be used as a page layout component, passing the rendered markdown content as children.
Example markdown file
---
title: About
layout: default-layout
---
# About
Example JSX layout file
---
---
<SiteHeader />
<Box px={3} py={4}>
{props.children}
</Box>
<SiteFooter />
--out-dir
, -d
: output directory--dev
, -D
: run as development server--open
, -o
: open development server in default browser--port
, -p
: set port for development serverFAQs
Compositor JSX static site generator
We found that @compositor/gen demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.