
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@servlyadmin/runtime-core
Advanced tools
Framework-agnostic core renderer for Servly components. This package provides the foundation for rendering Servly components in any JavaScript environment.
npm install @servlyadmin/runtime-core
# or
yarn add @servlyadmin/runtime-core
# or
pnpm add @servlyadmin/runtime-core
import { render, fetchComponent } from '@servlyadmin/runtime-core';
// Fetch a component from the registry (uses Servly's default registry)
const { data } = await fetchComponent('my-component-id');
// Render to a container
const result = render({
container: document.getElementById('app'),
elements: data.layout,
context: {
props: { title: 'Hello World' },
state: {},
context: {},
},
});
// Update props
result.update({
props: { title: 'Updated Title' },
state: {},
context: {},
});
// Cleanup
result.destroy();
By default, components are fetched from Servly's production registry:
https://core-api.servly.app/v1/views/registryYou can override this if you have a custom registry:
import { setRegistryUrl } from '@servlyadmin/runtime-core';
// Use a custom registry
setRegistryUrl('https://your-api.com/v1/views/registry');
The runtime supports three caching strategies to optimize component loading:
| Strategy | Description | Persistence | Best For |
|---|---|---|---|
localStorage | Persists across browser sessions | Yes | Production apps (default) |
memory | In-memory cache, cleared on page refresh | No | Development, SSR |
none | No caching, always fetches fresh | No | Testing, debugging |
Default: localStorage - Components are cached in the browser's localStorage for fast subsequent loads.
// Use default localStorage caching
const { data } = await fetchComponent('my-component');
// Explicitly set cache strategy
const { data } = await fetchComponent('my-component', {
cacheStrategy: 'memory', // or 'localStorage' or 'none'
});
// Force refresh (bypass cache)
const { data } = await fetchComponent('my-component', {
forceRefresh: true,
});
Components are defined as a tree of layout elements:
interface LayoutElement {
i: string; // Unique identifier
componentId: string; // Element type (container, text, button, etc.)
configuration?: { // Element configuration
classNames?: string;
style?: Record<string, any>;
text?: string;
// ... other attributes
};
children?: string[]; // Child element IDs
parent?: string; // Parent element ID
}
Data is passed to components through a binding context:
interface BindingContext {
props: Record<string, any>; // Component props
state: Record<string, any>; // Component state
context: Record<string, any>; // Additional context
}
Use {{path}} syntax to bind data:
const elements = [
{
i: 'greeting',
componentId: 'text',
configuration: {
text: 'Hello, {{props.name}}!',
classNames: '{{props.className}}',
},
},
];
Renders elements to a container.
const result = render({
container: HTMLElement,
elements: LayoutElement[],
context: BindingContext,
eventHandlers?: Record<string, Record<string, (e: Event) => void>>,
});
// Returns
interface RenderResult {
update(context: BindingContext): void;
destroy(): void;
getElement(id: string): HTMLElement | null;
}
Fetches a component from the registry.
const { data, fromCache, version } = await fetchComponent('component-id', {
version: 'latest', // Version specifier (default: 'latest')
cacheStrategy: 'localStorage', // 'localStorage' | 'memory' | 'none' (default: 'localStorage')
forceRefresh: false, // Bypass cache (default: false)
retryConfig: {
maxRetries: 3, // Number of retry attempts (default: 3)
initialDelay: 1000, // Initial retry delay in ms (default: 1000)
maxDelay: 10000, // Maximum retry delay in ms (default: 10000)
backoffMultiplier: 2, // Exponential backoff multiplier (default: 2)
},
});
Configure a custom registry URL.
import { setRegistryUrl, DEFAULT_REGISTRY_URL } from '@servlyadmin/runtime-core';
// Use custom registry
setRegistryUrl('https://your-api.com/v1/views/registry');
// Reset to default
setRegistryUrl(DEFAULT_REGISTRY_URL);
Manages component state with subscriptions.
import { StateManager } from '@servlyadmin/runtime-core';
const stateManager = new StateManager({ count: 0 });
// Get/set state
stateManager.set('count', 1);
stateManager.get('count'); // 1
stateManager.set('user.name', 'John');
// Subscribe to changes
const unsubscribe = stateManager.subscribe((event) => {
console.log('State changed:', event.path, event.value);
});
// Cleanup
stateManager.clear();
Handles events with plugin-based actions.
import { EventSystem, getEventSystem } from '@servlyadmin/runtime-core';
const eventSystem = getEventSystem();
// Register custom plugin
eventSystem.registerPlugin('my-action', async (action, context) => {
console.log('Action executed with:', action.config);
});
executeCode - Execute arbitrary JavaScript codestate-setState - Update state valuesnavigateTo - Navigate to URLlocalStorage-set/get/remove - LocalStorage operationssessionStorage-set/get - SessionStorage operationsalert - Show alert dialogconsole-log - Log to consoleclipboard-copy - Copy text to clipboardscrollTo - Scroll to elementfocus/blur - Focus/blur elementsaddClass/removeClass/toggleClass - CSS class manipulationsetAttribute/removeAttribute - Attribute manipulationdispatchEvent - Dispatch custom eventsdelay - Add delay between actionsimport {
clearAllCaches,
clearMemoryCache,
clearLocalStorageCache,
getMemoryCacheSize
} from '@servlyadmin/runtime-core';
// Clear all caches
clearAllCaches();
// Clear specific cache
clearMemoryCache();
clearLocalStorageCache();
// Get cache size
const size = getMemoryCacheSize();
Template resolution utilities.
import { resolveTemplate, hasTemplateSyntax } from '@servlyadmin/runtime-core';
const context = {
props: { name: 'World', count: 42 },
state: {},
context: {},
};
// Resolve single template
resolveTemplate('Hello, {{props.name}}!', context); // "Hello, World!"
// Check if string has template syntax
hasTemplateSyntax('{{props.name}}'); // true
hasTemplateSyntax('static text'); // false
Components can define slots for content injection:
const elements = [
{
i: 'card',
componentId: 'container',
configuration: { classNames: 'card' },
children: ['header-slot', 'content-slot'],
},
{
i: 'header-slot',
componentId: 'slot',
configuration: {
slotName: 'header',
},
parent: 'card',
},
{
i: 'content-slot',
componentId: 'slot',
configuration: {
slotName: 'default',
},
parent: 'card',
},
];
Framework wrappers handle slot content injection automatically.
Full TypeScript support with exported types:
import type {
LayoutElement,
BindingContext,
RenderResult,
RenderOptions,
ComponentData,
CacheStrategy,
RetryConfig,
FetchOptions,
FetchResult,
} from '@servlyadmin/runtime-core';
MIT
FAQs
Framework-agnostic core renderer for Servly components with prefetching and loading states
The npm package @servlyadmin/runtime-core receives a total of 7 weekly downloads. As such, @servlyadmin/runtime-core popularity was classified as not popular.
We found that @servlyadmin/runtime-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.