
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@slicemedia/devkit-addon
Advanced tools
Side-effect-free addon authoring primitives for Slice Media DevKit.
@slicemedia/devkit-addonSide-effect-free primitives for authoring a Webflow enhancement with the shared DevKit lifecycle.
The root package re-exports the addon contract from @slicemedia/devkit-core; importing it never
queries the DOM or starts an addon.
Install the 0.1.0 release candidate through the npm next tag:
npm install @slicemedia/devkit-addon@next
pnpm add @slicemedia/devkit-addon@next
yarn add @slicemedia/devkit-addon@next
import { createAddon, defineAddon } from "@slicemedia/devkit-addon";
An intentionally small demonstration is available through an explicit subpath:
import { createExampleAddon, exampleAddonDefinition } from "@slicemedia/devkit-addon/example";
const example = createExampleAddon();
await example.init();
The example owns only data-wft-example-state on elements marked with data-wft-example, restores
the authored value on teardown, and discovers later CMS content when refreshed. It is a reference
for people and AI agents, not a behavior included by the root import.
See Slice Media's support policy for help and maintenance expectations. Report vulnerabilities through the DevKit security policy, not a public issue.
Licensed under MIT. This package is independently developed by Slice Media and is not affiliated with, endorsed by, or sponsored by Webflow, Inc. Webflow and related marks belong to their respective owners. AI tools materially assisted its implementation and documentation; production use still requires human review, accessibility and security checks, and project-specific testing.
FAQs
Bootstrap placeholder for the @slicemedia/devkit-addon package identity; not a functional release.
The npm package @slicemedia/devkit-addon receives a total of 4 weekly downloads. As such, @slicemedia/devkit-addon popularity was classified as not popular.
We found that @slicemedia/devkit-addon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.