Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@lwc/engine-core
Advanced tools
This package contains the core logic shared by different runtime environments. Examples of this include the rendering engine and the reactivity mechanism. Since this package only provides internal APIs for building custom runtimes, it should never be consumed directly in an application.
Usage of internal APIs are prevented by the compiler and are therefore not documented here.
This package supports the following APIs.
This decorator is used to mark the public fields and the public methods of an LWC component.
import { LightningElement, api } from 'lwc';
class LightningHello extends LightningElement {
@api
hello = 'default hello';
}
This decorator should be used on private fields to track object mutations.
import { LightningElement, api, track } from 'lwc';
class LightningHello extends LightningElement {
@api
get name() {
return name.raw;
}
set name(value) {
name.normalized = normalize(value);
}
@track
name = {
raw: 'Web components ',
normalized: 'Web Components',
};
}
This decorator should be used to wire fields and methods to a wire adapter.
import { LightningElement, wire } from 'lwc';
import { getRecord } from 'recordDataService';
export default class Test extends LightningElement {
@wire(getRecord, { id: 1 })
recordData;
}
This function creates a context provider, given a wire adapter constructor.
This class should be extended to create an LWC constructor.
import { LightningElement } from 'lwc';
class LightningHello extends LightningElement {
// component implementation
}
Experimental APIs are subject to change, may be removed at any time, and should be used at your own risk!
This experimental API provides access to internal component metadata.
This experimental API enables the identification of LWC constructors.
This experimental API enables the creation of a reactive readonly membrane around any object value.
This experimental API enables the registration of 'services' in LWC by exposing hooks into the component life-cycle.
This experimental API enables the sanitization of attribute values by external services.
This experimental API enables the removal of an object's observable membrane proxy wrapper.
FAQs
Core LWC engine APIs.
The npm package @lwc/engine-core receives a total of 4,405 weekly downloads. As such, @lwc/engine-core popularity was classified as popular.
We found that @lwc/engine-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.