
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@kitschpatrol/tweakpane-plugin-rotation
Advanced tools
A fork of tweakpane-plugin-rotation with build optimizations.
This is a fork of 0b5vr's tweakpane-plugin-rotation with externalized dependencies.
This allows for smaller bundled file sizes in projects using multiple Tweakpane plugins.
It is published to NPM primarily for the Svelte Tweakpane UI project, and will be kept in sync with the upstream version of the plugin, with minimal changes other than dependency externalization.
For most use cases, you probably don't want this fork!
The Rollup configuration provided in the Tweakpane plugin template does not externalize @tweakpane/core
as a production dependency.
Instead, it gets built into the single-file plugin artifact, which is what's published to NPM and imported by plugin consumers. This makes it easy to import as an ES module from a URL, but means that larger projects importing multiple Tweakpane plugins end up with duplicate copies of the @tweakpane/core
code, adding about ~100 Kb to the final minified build for each plugin after the first.
Externalizing this dependency allows build tools like vite to share a single instance of the @tweakpane/core
code across multiple plugins.
If you're not using a bundler, direct ESM imports from URLs can still work by defining the @tweakpane/core
dependency in an importmap.
This fork uses the main branch for the releases instead of dev.
Note the package's name change from @0b5vr/tweakpane-plugin-rotation
to @kitschpatrol/tweakpane-plugin-rotation
.
PNPM is used as the package manager.
In addition to the dependency externalization change, this fork also includes assorted dependency updates. In an effort to stay in sync with future upstream versions, intra-minor-version releases of the fork are tagged as "betas" of what would / will be the next patch release upstream.
FAQs
A fork of tweakpane-plugin-rotation with build optimizations.
The npm package @kitschpatrol/tweakpane-plugin-rotation receives a total of 2,445 weekly downloads. As such, @kitschpatrol/tweakpane-plugin-rotation popularity was classified as popular.
We found that @kitschpatrol/tweakpane-plugin-rotation demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.