
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@onlyoffice/docspace-plugin-sdk
Advanced tools
ONLYOFFICE DocSpace Plugins SDK is an npm package based on TypeScript engines which provides interfaces to create your own plugins for embedding in the DocSpace portal.
To install the @onlyoffice/docspace-plugin-sdk npm package globally, run the following command in the terminal:
npm i -g @onlyoffice/docspace-plugin-sdk
After installing the npm package, the npx create-docspace-plugin command becomes available and allows you to create a plugin template with the pre-installed plugin types and the implementation of basic methods.
This command displays a dialog which allows you to configure the plugin settings and select the required scopes.
You can find a list of all the dialog questions here.
Code samples are available at https://github.com/ONLYOFFICE/docspace-plugins.
For plugins created with the old template (SDK 1.1.1), replace the build script in package.json with the following:
"build": "webpack && npx build-docspace-plugin"
:::note To ensure the new npx command works correctly, you need to update the globally installed @onlyoffice/docspace-plugin-sdk package to version 2.0.0 or higher. :::
To build a plugin, you need Node.js and npm to be installed. After that, follow the instructions below:
cd PDF-Converter
npm install
npm run build
This command generates the obfuscated code from the entire project and collects it into the plugin.js file using the webpack npm package.
The dist folder will be created in the root plugin folder and the plugin archive will be placed in it. This archive is the completed plugin that can be uploaded to the DocSpace portal.
The old createZip script is no longer required and can be safely removed.
FAQs
Simple plugin system for onlyoffice docspace
The npm package @onlyoffice/docspace-plugin-sdk receives a total of 235 weekly downloads. As such, @onlyoffice/docspace-plugin-sdk popularity was classified as not popular.
We found that @onlyoffice/docspace-plugin-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.