
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@eclipse-glsp/sprotty
Advanced tools
A web-based diagram client framework for the Graphical Language Server Platform (GLSP) based on Eclipse Sprotty.
This project is built with yarn
and is available from npm via @eclipse-glsp/client.
For more information, please visit the Eclipse GLSP Umbrella repository and the Eclipse GLSP Website. If you have questions, please raise them in the discussions and have a look at our communication and support options.
RoundedCornerNodeView
#430LayoutOperation
with additional optional client-side information (viewport) #433 #434
TriggerLayoutAction
should be dispatched instead of a direct LayoutOperation
LayoutOperation
s will still work, but the optional information will not be presentILayouts
to specify whether the layouting of children is independent of their semantic order in the model.
The BringToFrontCommand
respects this flag and only changes the ordering of order-agnostic layoutszorder
module now requires bounds module as we need the layout registryEditorContextService
#438
IModelChangeService
which is reused by the EditorContextService
GLSPCommandStack
: 'notifyListener' method has been removedEditorContextService
:
_modelRoot
and onModelRootChangedEmitter
properties. Corresponding getters now forward to the IModelChangeService
notifyModelRootChanged
method (Probably no side effect for adopters. Method was only callable from commandstack anyways)FAQs
Augmented reexport of the sprotty API for GLSP
The npm package @eclipse-glsp/sprotty receives a total of 2,572 weekly downloads. As such, @eclipse-glsp/sprotty popularity was classified as popular.
We found that @eclipse-glsp/sprotty demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.