
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@morgan-stanley/composeui-fdc3
Advanced tools
FDC3 DesktopAgent implementation for Compose UI
composeui-fdc3
is a TypeScript/JavaScript package that provides FDC3 support for ComposeUI applications. It enables interoperability between desktop applications by implementing the FDC3 standard APIs for context sharing, intent handling, and application discovery.
Note: This package currently supports only FDC3 version 2.0.
It uses the MessageRouter TypeScript library as its messaging layer.
You need to embed the generated bundle into your shell application, similar to how it is handled in the current Shell POC. In that example, a .NET Framework WPF application includes the bundle as an embedded resource. When using WebView2 to load web windows, the application initializes the bundle as a script and injects it into the page.
To use the FDC3 APIs, install the official FINOS FDC3 library (version 2.0) in your application:
npm install @finos/fdc3@2.0.0
Import and use the FDC3 API in your application as needed.
// Raise an intent
fdc3.raiseIntent('ViewChart', { instrument: { type: 'fdc3.instrument', id: { ticker: 'AAPL' } } });
// Broadcast context
fdc3.broadcast({ type: 'fdc3.contact', name: 'Jane Doe' });
// Listen for context
fdc3.addContextListener('fdc3.instrument', context => {
console.log('Received instrument context:', context);
});
This package implements the FDC3 2.0+ API. See the FDC3 documentation for details on available methods and context types.
© Morgan Stanley. See NOTICE file for additional information.
FAQs
FDC3 DesktopAgent implementation for Compose UI
We found that @morgan-stanley/composeui-fdc3 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.