Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
By Socket Research Team - Dec 02, 2024
Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More →
@ephox/bolt
Advanced tools
Bolt
Bolt is a javascript module system, inspired by, but at this point (intentionally) not compatible with the AMD specification. Bolt consists of a runtime framework, compiler and testing tools.
The general philosophy is quick, clean and easy.
Bolt is open source under a Apache-2.0 style license.
Getting Bolt
npm install -g @ephox/bolt
This will add the bolt command to your path.
Source
Bolt is split into several repositories to assist in structuring the code, however you can build bolt by just cloning this repository and running make. This will pull down the required git repositories and produce a local build.
git clone https://github.com/ephox/bolt.git cd bolt make
A distribution tar can then be found in gen/dist/bolt-local.tar.gz, or unpacked in gen/image/bolt-local.
Getting Started
Checkout the github wiki for some basic documentation on getting started.
FAQs
Bolt, AMD-like module system for JavaScript
The npm package @ephox/bolt receives a total of 22 weekly downloads. As such, @ephox/bolt popularity was classified as not popular.
We found that @ephox/bolt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 22 Nov 2017
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
Research
Typosquatting Cryptographic Libraries: Malicious npm Packages Threaten Crypto Developers with Keylogging and Wallet Theft
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
By Kirill Boychenko - Nov 27, 2024
Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
By Sarah Gooding - Nov 26, 2024