
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@edunext/frontend-lib-learning-assistant
Advanced tools
A frontend library for an Open edX learning assistant.
frontend-lib-learning-assistant ###############################
|license-badge| |status-badge| |ci-badge| |codecov-badge|
.. |license-badge| image:: https://img.shields.io/github/license/edx/frontend-lib-learning-assistant.svg :target: https://github.com/edx/frontend-lib-learning-assistant/blob/main/LICENSE :alt: License
.. |status-badge| image:: https://img.shields.io/badge/Status-Maintained-brightgreen
.. |ci-badge| image:: https://github.com/edx/frontend-lib-learning-assistant/actions/workflows/ci.yml/badge.svg :target: https://github.com/edx/frontend-lib-learning-assistant/actions/workflows/ci.yml :alt: Continuous Integration
.. |codecov-badge| image:: https://codecov.io/github/edx/frontend-lib-learning-assistant/coverage.svg?branch=main :target: https://codecov.io/github/openedx/frontend-lib-learning-assistant?branch=main :alt: Codecov
This React library is the Learning Assistant frontend library. It provides the frontend code for a Learning Assistant
tool. This tool is meant to be installed into the Learning micro-frontend (MFE)_.
This library is currently a work in progress, so documentation is not complete.
.. _Learning micro-frontend (MFE): https://github.com/openedx/frontend-app-learning
This library is intended for use with the Learning MFE_. Please follow instructions for running the Learning MFE as
documented in the repository README.
.. _Learning MFE: https://github.com/openedx/frontend-app-learning
This library is intended for use with the Learning MFE. In order to install a local checkout of this library into
the Learning MFE instead of from npm, follow the documentation for local module development_ in the Learning MFE_.
If you are planning to run the Learning MFE_ in devstack, be sure to clone this repository into a src
subdirectory of your devstack workspace directory so that the code is properly mounted into the Learning MFE_
Docker container. You will need to update the dir key in your module.config.js file appropriately. See
the Mounting frontend packages from src directory_ ADR in the devstack_ repository for further details.
If you want to install a local checkout of this library into the Learning MFE, follow the documentation mentioned
above. However, if you want do active development on this library and wish to see your changes immediately reflected in
the Learning MFE, then you will need to modify your module.config.js to reference the src directory of this
repository in the dist key instead of the dist directory. Below is an example module.config.js for this
use case. If you set up your module.config.js this way, your changes will be picked up by the Learning MFE_ via
the hot module reloading process.::
module.exports = { localModules: [ { moduleName: '@edx/frontend-lib-learning-assistant', dir: '../src/frontend-lib-learning-assistant', dist: 'src' }, ], };
.. _devstack: https://github.com/openedx/devstack .. _Learning MFE: https://github.com/openedx/frontend-app-learning .. _local module development: https://github.com/openedx/frontend-app-learning#local-module-development .. _Mounting frontend packages from src directory: https://github.com/openedx/devstack/blob/master/docs/decisions/0005-frontend-package-mounts.rst
.. note::
[TODO]
Explicitly list anything that this MFE requires to function correctly. This includes:
A list of both required and optional .env variables, and how they each affect the functioning of the MFE
A list of edx-platform feature and waffle flags_ that are either required
to enable use of this MFE, or affect the behavior of the MFE in some other
way
A list of IDAs or other MFEs that this MFE depends on to function correctly
.. _feature and waffle flags: https://docs.openedx.org/projects/openedx-proposals/en/latest/best-practices/oep-0017-bp-feature-toggles.html
[TODO]
If you are interested in using this repository, please contact team-cosmonauts@edx.org.
The code in this repository is licensed under the AGPLv3 unless otherwise noted.
Please see LICENSE <LICENSE>_ for details.
This repo is not currently accepting contributions.
All community members are expected to follow the Open edX Code of Conduct_.
.. _Open edX Code of Conduct: https://openedx.org/code-of-conduct/
Please do not report security issues in public. Email security@edx.org instead.
FAQs
A frontend library for an Open edX learning assistant.
We found that @edunext/frontend-lib-learning-assistant demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.