
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@sisense/sdk-plugins-cli
Advanced tools
Compose SDK CLI command for creating and scaffolding plugin repositories
This is a base React + TypeScript + Vite repository for building CSDK plugins.
Install the dependencies:
npm install
Copy .env.local.example to .env.local and fill in your values:
VITE_APP_SISENSE_URL=https://your-sisense-instance.com
VITE_APP_SISENSE_TOKEN=your-api-token-here
The API token can be generated with npx @sisense/sdk-cli get-api-token.
To deploy the plugin to your Sisense Fusion instance, use an API token for a user with the 'Admin' role.
Start the development server with hot reload:
npm run dev
The app will be available at http://localhost:3000 to test your plugin.
Sisense instance should be configured to allow CORS from http://localhost:3000.
Run unit tests:
npm run test
Run tests in watch mode:
npm run test:watch
Build the plugin for production:
npm run build
Build for Sisense Fusion deployment:
npm run build:fusion
Deploy your plugin to Sisense:
npm run deploy
This requires a valid Sisense connection (see "Connecting to Sisense" above).
npm run lint
npm run lint:fix
npm run format
npm run format:check
.
├── src/
│ ├── components/
│ │ ├── Visualization.tsx # Main visualization component
│ │ ├── DesignPanel.tsx # Configuration panel shown in the design sidebar
│ ├── dev-preview-props.ts # Sample props used by the dev preview app
│ ├── types.ts # TypeScript types for the plugin's props and options
│ ├── index.tsx # Plugin entry point; registers the plugin with metadata and data panel config
│ └── vite-env.d.ts # Vite type declarations
├── dev/ # Development app (served by `npm run dev`)
│ ├── index.html # Dev app entry HTML
│ ├── main.tsx # Dev app entry point
│ ├── models/ # Sample data models
│ └── vitest.setup.ts # Vitest global setup
├── .env.local # Environment variables (gitignored)
├── .env.local.example # Template for .env.local
├── vite.config.ts # Vite / Vitest configuration
└── package.json # Project configuration
Built plugins expose separate entry points for Angular and Vue host apps:
| Import path | Used by |
|---|---|
your-plugin | React host apps |
your-plugin/angular | Angular host apps |
your-plugin/vue | Vue host apps |
@sisense/sdk-data — Data modeling and querying@sisense/sdk-ui — UI components and context providers@sisense/sdk-plugins-dev — Plugin development tooling (Vite plugin, dev app, deploy script)react & react-dom — React frameworknpm run devnpm run testnpm run deployFAQs
Compose SDK CLI command for creating and scaffolding plugin repositories
The npm package @sisense/sdk-plugins-cli receives a total of 428 weekly downloads. As such, @sisense/sdk-plugins-cli popularity was classified as not popular.
We found that @sisense/sdk-plugins-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.