
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@solidlab/sdx
Advanced tools
SDX makes development of SOLID applications more enjoyable.
To read more about the conceptual ideas concerning the SDX, see the Powerpoint slides
npm i -g @solidlab/sdx
Requires at least node 18.0.0
sdx search <type>
sdx type install <type>
sdx help
Initializes a workspace for Solid Application Development.
sdx init [--force]
Writes 4 important files:
.solidmanifest
: manifest of your application.sdxconfig
: config files for the sdx toolkitpackage.json
: starting package.json for this projectsdx-types/
: folder that will contain the generated d.ts filesSearch for a SOLID data type.
sdx search [type]
Will search the central SOLID Types Catalog and any other repositories added to the .sdxconfig
file for potential matches.
Install a SOLID data type.
sdx install type [type]
Install a type into your local project. It will be added to the .solidmanifest file and will be auto-converted to a d.ts file in your sdx-types/
folder.
Start the continuous development server with:
npm run dev
0.3.0 - 2023-06-12
lib
folder content was pulled up a directory.model
package is now at the root level.FAQs
Solid Development Experience toolkit
The npm package @solidlab/sdx receives a total of 0 weekly downloads. As such, @solidlab/sdx popularity was classified as not popular.
We found that @solidlab/sdx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.