
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
LuxUI is a web UI rendering framework that translates Siren APIs into fully interactive web applications.
NOTE: This project is still in heavy development and is not ready for actual use at this time. Releasing to the open source community is aimed at getting feedback and help from the community.
LuxUI is a web UI rendering framework. LuxUI translates API resources into fully interactive web applications. LuxUI empowers API developers to build consistent, well-structured, diverse UIs without ever needing to work in CSS, HTML, or JavaScript. LuxUI requires API responses to follow the Siren hypermedia standard with some additional restrictions (Siren+lux).
Install LuxUI as a dependency in your project:
$ npm install --save @luxui/luxReact
Projects using LuxUI must provide two configuration settings: an API root URI
(apiRoot
) and a location to render the application to (renderRoot
). The API
root URI should be an absolute URI to the root resource of the API "backing"
the application. The render location should be a id
of a DOM resource that
the implementation code will be able to "own" for application rendering.
Then you will be able to use LuxUI in your application(s):
import luxReact from '@luxui/luxReact';
const app = luxReact({
apiRoot: 'http://api.root',
renderRoot: document.getElementById('renderRoot'),
});
app.visit();
Some applications will have a need for pages that aren't represented in the API as resources. LuxUI provides a way to register specific URLs that will be handled by a custom handlers. Once you have defined the implementation specific handler the way pages are registered are as follows:
import luxReact from '@luxui/luxReact';
import homePageHandler from './homePageHandler';
const app = luxReact({
apiRoot: 'http://api.root',
renderRoot: document.getElementById('renderRoot'),
});
app
.page('/home', homePageHandler)
.visit();
All pages will make an API call to the root resource of that API for meta information - such as main menu links, login status, etc. - and will then receive a responseModel object of that request.
For more information about what responses from the API should be and why read through the API Implementation Guide.
If you would like to get involved in the development of the project we would appreciate your help; please review the Contributing Guide and browse the open Pull Requests and Issues for ideas on where to focus.
An ultimate goal of LuxUI is to make the following statement completely true:
"The API is in control of everything."
The tactics that LuxUI employs to accomplish this goal are:
These will be the supported versions; at this time there is no specific browser testing or validation. If you find problems please report them as issues.
FAQs
LuxUI is a web UI rendering framework that translates Siren APIs into fully interactive web applications.
The npm package @luxui/lux receives a total of 0 weekly downloads. As such, @luxui/lux popularity was classified as not popular.
We found that @luxui/lux demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.