
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
@formfeed/devkit
Advanced tools
Formfeed template folders, project config and local rendering, shared by the CLI and @formfeed/testing.
The local half of the Formfeed development kit: template folders, project
configuration (formfeed.json) and offline rendering with the same engine the API uses. The
formfeed CLI and
@formfeed/testing are built on it; use it
directly when you write your own tooling around a template repository.
npm install @formfeed/devkit
import { defaultData, diagnose, projectAround, readTemplate, renderLocal } from '@formfeed/devkit';
// a folder with template.html, template.json, style.css, data/*.json (see the project layout docs)
const project = projectAround('templates/invoice-de');
const tpl = readTemplate(project, 'invoice-de');
const { data } = defaultData(tpl); // data/default.json, or the first data set
console.log(diagnose(tpl, data)); // the editor's diagnostics: syntax errors, unknown variables
const { document } = await renderLocal(project, tpl, data, { mode: 'print' }); // complete HTML, no browser
A folder can hold a Word or PowerPoint document (template.docx or template.pptx) instead of the
HTML files; readTemplate returns it as tpl.file and templateFileName(kind) names the file for
a kind. diagnose lists such a template's findings by part and paragraph, renderOfficeLocal fills
it (bytes, warnings) and officeSnapshot(bytes) turns the filled file into readable XML for
snapshot tests:
import { officeSnapshot, readTemplate, renderOfficeLocal } from '@formfeed/devkit';
const offer = readTemplate(project, 'offer');
const filled = await renderOfficeLocal(project, offer, { customer: { name: 'Olvarest GmbH' } });
console.log(filled.warnings, officeSnapshot(filled.bytes));
renderLocal works on HTML templates only. Errors are DevkitError instances with a code, which
the CLI maps to its exit codes.
MIT
FAQs
Formfeed template folders, project config and local rendering, shared by the CLI and @formfeed/testing.
The npm package @formfeed/devkit receives a total of 0 weekly downloads. As such, @formfeed/devkit popularity was classified as not popular.
We found that @formfeed/devkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.