
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@schukai/monster
Advanced tools
Monster is a simple library for creating fast, robust and lightweight websites.
Monster is perfectly suited for the creation of beautiful and fast
user interfaces and websites.
Monster relies on proven concepts mixed with many new JavaScript concepts such as classes, WeakRef, WeakMaps, proxies or the MutationObserver interface, just to name a few.
Monster integrates easily into your existing websites without taking over everything.
It is not the goal of Monster to pull in an entirely new abstraction
with its own language, but to combine the existing techniques of HTML,
CSS and JavaScript in a meaningful way.
One design target is to reach the shiny sun with as little JavaScript as possible.
Monster was built with ES6 modules and uses import
and export.
For some functions, you need additional polyfills.
To check out docs and examples, visit monsterjs.org/en/doc/monster/.
npm install @schukai/monster
, yarn install @schukai/monster
or pnpm install @schukai/monster
A simple example of the use of functionality from Monster. We create a small file index.mjs
.
The m
in .mjs
stands for module. In the example we want to make substitutions in a string.
import {Formatter} from '@schukai/monster/source/text/formatter.mjs';
const text = '${mykey${subkey}}';
let obj = {
mykey2: "1",
subkey: "2"
};
new Formatter(obj).format(text);
// ↦ 1
To integrate this function into a website it is recommended to use a bundler like esbuild.
esbuild index.mjs --outfile dist.js
We can now integrate that into our website.
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Monster</title>
<script src="dist.js"></script>
</head>
<body>
Voila!
We do try to work around some browser bugs, but on the whole we don't use polyfills and feature detection.
However, many functions can be mapped via polyfill.io and thus the compatibility can be increased.
<script id="polyfill" src="https://polyfill.io/v3/polyfill.min.js?feat"
crossorigin="anonymous"
referrerpolicy="no-referrer"></script>
For questions and commercial support, please contact schukai GmbH. The issue list of this repo is exclusively for bug reports and feature requests.
Please make sure to read the Issue Reporting Checklist before opening an issue. Issues not conforming to the guidelines may be closed immediately.
Copyright © 2022 schukai GmbH
You can also purchase a commercial license.
Detailed changes for each release are documented in the CHANGELOG.
FAQs
Monster is a simple library for creating fast, robust and lightweight websites.
The npm package @schukai/monster receives a total of 572 weekly downloads. As such, @schukai/monster popularity was classified as not popular.
We found that @schukai/monster demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.