
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
@saasquatch/component-environment
Advanced tools
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Provides the environment for running SaaSquatch web components.
SaaSquatch web components can run in a number of different environments, including:
squatch-js
squatch-android
)In each environment, a different set of context information about the tenant, user and program are provided, and the goal of this package is to normalize the differences in environments to provide a common API.
The environment is provided in a set of contexts through dom-context
, which provides vanilla global context providers. They can be accessed through a raw ContextListener
or via useDomContext
in dom-context-hooks
.
getEnvironment()
Get the environment type. The current possible values are: SquatchJS2
, SquatchAndroid
, SquatchPortal
, SquatchAdmin
or None
.
isDemo()
Returns whether components should run in demo/preview mode.
getTenantAlias()
Get the current tenant alias.
getAppDomain()
Get the SaaSquatch app domain.
getEngagementMedium()
Get the current engagement medium. This is particularly important in widgets rendered by squatch-js
for informing metadata about share link clicks.
The user identity context name is exported in a constant USER_CONTEXT_NAME
. The current value can be retrieved with getUserIdentity()
and set with setUserIdentity(identity)
.
The locale context name is exported in a constnat LOCALE_CONTEXT_NAME
. The current value can be retrieved with getLocale()
and set with setLocal(locale)
.
The program ID context name is exported in a constant PROGRAM_CONTEXT_NAME
. The current value can be retrieved with getProgramId()
and set with setProgramId(programId)
.
FAQs
Environment and contexts for SaaSquatch components
The npm package @saasquatch/component-environment receives a total of 74 weekly downloads. As such, @saasquatch/component-environment popularity was classified as not popular.
We found that @saasquatch/component-environment demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.