
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@imarc/vitrine
Advanced tools
Vitrine is a vite plugin that provides a lightweight component library. It is still being developed, and currently only supports working with vite's dev server; it does not build a static library.
npm install @imarc/vitrine
Vitrine should be imported into your vite.config.js and added to the plugins in your vite config:
import vitrine from '@imarc/vitrine'
export default defineConfig({
plugins: [vitrine({
// ...
})]
})
vitrine()
can also take the following configuration options:
[]
. Example: includes: ['/src/main.js']
['resources/styles']
.vitrine
.name
.Advanced options
/\.md|\/.html?$/i
true
. You would want to turn this off if Vite is being included through another method. For example, if you're using Nuxt, you likely want to set this to false
.dist
false
to disable using the manifest at all. Default: ${outDir}/.vite
/components
<link>
or <script>
tag. Default: /\.(css|less|sass|scss|styl)$/i
_preview.html
and use that, but if it doesn't exist, it will fallback to its own builtin template. Default: _preview.html
Sample configuration
export default defineConfig({
plugins: [vitrine({
includes: [
'/resources/styles/index.scss',
'/resources/js/index.js',
],
basePaths: [
'resources',
],
})]
})
Vitrine is being developed as an open source project and welcomes contributions. Vitrine's goal is to maintain a small footprint and not be tied to any specific framework - we may even remove the dependency on Vue for SSR. It should work anywhere Vite does.
The recommmended way to work on vitrine is to start with a parent project (like imarc/pronto), checkout out both the parent project and vitrine.
npm link
npm link vitrine
npm run dev
within the parent project.Using npm link
, you can develop and test changes to Vitrine and see how it handles teh components in your parent project.
FAQs
Vitrine =======
The npm package @imarc/vitrine receives a total of 11 weekly downloads. As such, @imarc/vitrine popularity was classified as not popular.
We found that @imarc/vitrine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.