
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@lumal/vite
Advanced tools
Lumal 的轻量 Vite 配置助手,提供组件 resolver、工作区源码/产物 alias 和可选 Devtools 接线。
import { createLumalAliases, createLumalComponentResolver } from '@lumal/vite'
const aliases = createLumalAliases({ workspaceRoot: process.cwd() })
const resolver = createLumalComponentResolver({ importStyle: true })
本包不提供全局 viewport 转换,也不强制安装自动导入或 Devtools 插件。
FAQs
Lumal Vite component resolver, workspace aliases and optional devtools helpers.
We found that @lumal/vite demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.