Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@huggingface/widgets
Advanced tools
Open-source version of the inference widgets from huggingface.co
Built with Svelte and SvelteKit
Demo page: https://huggingface.co/spaces/huggingfacejs/inference-widgets
Because @huggingface/widgets
depends on @huggingface/tasks
, you need to publish @huggingface/tasks
first, and then @huggingface/widgets
. There should be a CI check to prevent publishing @huggingface/widgets
if @huggingface/tasks
hasn't been published yet.
You can run the demo locally:
pnpm install
pnpm dev --open
If you are submitting a PR, make sure that you run format
& lint
before submitting the PR:
pnpm format
pnpm lint
If you want to try the "Sign-in with HF" feature locally, you will need to https://huggingface.co/settings/applications/new an OAuth application with "openid"
, "profile"
and "inference-api"
scopes and http://localhost:5173/auth/callback/huggingface
as the redirect URL.
Then you can create a .env.local
file with the following content:
OAUTH_CLIENT_ID=...
OAUTH_CLIENT_SECRET=...
If you want to try the "Sign-in with HF" feature in a Space, you can just duplicate https://huggingface.co/spaces/huggingfacejs/inference-widgets, it should work out of the box thanks to the metadata in the README.md
file.
pnpm i
pnpm build
And then inside moon, run the following command for both server
& front
:
npm i --save @huggingface/widgets@<relative path to huggingface.js/packages/widgets>
FAQs
Open-source version of the inference widgets from huggingface.co
The npm package @huggingface/widgets receives a total of 1 weekly downloads. As such, @huggingface/widgets popularity was classified as not popular.
We found that @huggingface/widgets demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.