
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
@mapled/support
Advanced tools
The support window of Mapled, the hosted headless CMS for sites built with AI — a chat button on any site: visitors write to the project's team, answers come back in the window and by email. One script tag, or a React component.
The support window of Mapled: a chat button in the corner of any site. A visitor writes to the project's team; the conversation lands in the project's Inbox in Mapled, the team's answers come back in the window and by email, and the visitor's email replies land in the same conversation.
Turn the project's Inbox on in Mapled first. While it's off, the widget doesn't show.
<script src="https://cdn.jsdelivr.net/npm/@mapled/support@0.1.0/dist/support.js" data-mapled-key="mk_live_…" defer></script>
The address names a version: a new release never changes a page that didn't ask for it. The key is the project's delivery key (Mapled: Integrations → Your site; it starts with mk_live_), the one the site already reads content with. It is public by design. Never put a server key (msk_live_), an agent token (mcp_live_) or a webhook secret (whsec_) into a page.
| Attribute | What it does |
|---|---|
data-mapled-key | the delivery key (required) |
data-mapled-position | left puts the button in the bottom-left corner (right by default) |
data-mapled-accent | the button's and the visitor's messages' color, a hex value like #2f6bff |
data-mapled-title | the panel's title (the project's name by default) |
data-mapled-api | another API origin |
To open the window from the site's own "Contact" link:
<a href="#" onclick="window.MapledSupport.open(); return false">Contact us</a>
import { SupportWidget } from "@mapled/support/react";
export function Layout({ children }: { children: React.ReactNode }) {
return (
<>
{children}
<SupportWidget deliveryKey={import.meta.env.VITE_MAPLED_KEY} accent="#2f6bff" />
</>
);
}
The component renders nothing in place: the widget mounts itself in the page's corner and goes away with the component. key is React's own prop, so the delivery key goes by deliveryKey.
import { mountSupportWidget } from "@mapled/support";
const widget = mountSupportWidget({ key: "mk_live_…", position: "right" });
widget.open();
mountSupportWidget returns open(), close(), destroy() and ready — a promise of true once the button shows, false when the project doesn't take messages. createSupportClient gives the same calls without the window, for a form of your own; its failures are SupportErrors with the API's status, code and message. Both talk to DEFAULT_API (https://api.mapled.io) unless apiUrl says otherwise.
/v1/delivery/inbox/conversations.X-Mapled-Conversation), never in an address. Mapled keeps only its hash.FAQs
The support window of Mapled, the hosted headless CMS for sites built with AI — a chat button on any site: visitors write to the project's team, answers come back in the window and by email. One script tag, or a React component.
The npm package @mapled/support receives a total of 396 weekly downloads. As such, @mapled/support popularity was classified as not popular.
We found that @mapled/support demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.