Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@jinjiang/vlite
Advanced tools
A lite demo server, inspired by Vite.
npm install -g @jinjiang/vlite
# or
yarn global add @jinjiang/vlite
# or
pnpm add -g @jinjiang/vlite
A quick Vue demo
echo "<div id=\"app\"></div><script type=\"module\" src=\"./main.ts\"></script>" > index.html
echo "import { createApp } from 'vue'\nimport App from './App.vue'\ncreateApp(App).mount('#app')" > main.ts
echo "<template><h1>Hello, Vlite\!</h1></template>" > App.vue
vlite
A quick React demo
echo "<div id=\"app\"></div><script type=\"module\" src=\"./main.tsx\"></script>" > index.html
echo "import React from 'react'\nimport ReactDOM from 'react-dom'\nReactDOM.render(<h1>Hello, World\!</h1>, document.getElementById('app'))" > main.tsx
vlite
vlite [<target-dir>] [--port <port>]
vlite [<target-dir>] --build
vlite [<target-dir>] --bundle
vlite --help
vlite --version
[!WARNING] To be noticed: the build and bundle commands are in experimental stage. For bundle mode, you have to add this script into your
index.html
:
<script> // TODO: Remove this line when define plugin is supported by Rolldown globalThis.process = { env: { NODE_ENV: 'development' } }; </script>
See the Vue example.
See the React example and the Vue example.
MIT
FAQs
Lite demo server, inspired by Vite
The npm package @jinjiang/vlite receives a total of 0 weekly downloads. As such, @jinjiang/vlite popularity was classified as not popular.
We found that @jinjiang/vlite demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.