Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@familyjs/core
Advanced tools
Family is an open source App Development Framework that makes it easy to build top quality Native and Progressive Web Apps with web technologies.
The Family Core package contains the Web Components that make up the reusable UI building blocks of Family Framework. These components are designed to be used in traditional frontend view libraries/frameworks (such as Rindo, React, or Kdu), or on their own through traditional JavaScript in the browser.
Easiest way to start using Family Core is by adding a script tag to the CDN:
<script type="module" src="https://cdn.jsdelivr.net/npm/@familyjs/core/dist/family/family.esm.js"></script>
<script nomodule src="https://cdn.jsdelivr.net/npm/@familyjs/core/dist/family/family.js"></script>
<link href="https://cdn.jsdelivr.net/npm/@familyjs/core/css/family.bundle.css" rel="stylesheet">
Any Family component added to the webpage will automatically load. This includes writing the component tag directly in HTML, or using JavaScript such as document.createElement('fml-toggle')
.
Additionally, within this package is a dist/family.js
file and accompanying dist/family/
directory. These are the same files which are used by the CDN, and they're available in this package so they can be apart of an app's local development.
The @familyjs/core
package can by used in simple HTML, or by vanilla JavaScript without any framework at all. Family also has packages that make it easier to integrate Family into a framework's traditional ecosystem and patterns. (However, at the lowest-level framework bindings are still just using Family Core and Web Components).
FAQs
Base components for Family
The npm package @familyjs/core receives a total of 26 weekly downloads. As such, @familyjs/core popularity was classified as not popular.
We found that @familyjs/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.