Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@sryden/ejsx
Advanced tools
Enhanced EJS templating with components, layouts, and modern features
EJSX is a powerful extension of EJS (Embedded JavaScript) templating engine that adds modern features like components, layouts, middleware, and hooks. It's designed to make server-side rendering more maintainable and developer-friendly while maintaining the simplicity and flexibility of EJS.
npm install @sryden/ejsx
import ejsx from 'ejsx';
import express from 'express';
const app = express();
// Register a component
ejsx.registerComponent('Button', {
render: ({ text, type = 'primary' }) => `
<button class="btn btn-${type}">
${text}
</button>
`,
validate: (props) => {
if (!props.text) return 'Button text is required';
return true;
}
});
// Register a layout
ejsx.layouts.set('main', (slots) => `
<!DOCTYPE html>
<html>
<head>
<title>${slots.title || 'EJSX App'}</title>
<style>${slots.styles || ''}</style>
</head>
<body>
${slots.content || ''}
<script>${slots.scripts || ''}</script>
</body>
</html>
`);
// Use in your Express app
app.engine('ejs', ejsx.renderFile);
app.set('view engine', 'ejs');
Create a view (views/index.ejs
):
<% slots.title = 'Welcome' %>
<% slots.content = `
<div class="container">
<h1>Welcome to EJSX</h1>
${await renderComponent('Button', {
text: 'Get Started',
type: 'primary'
})}
</div>
` %>
<%- await renderLayout('main', slots) %>
ejsx.registerComponent('Card', {
render: ({ title, content }) => `
<div class="card">
<h2>${title}</h2>
<div>${content}</div>
</div>
`,
styles: `
.card {
border: 1px solid #ddd;
padding: 1rem;
margin: 1rem 0;
}
`,
scripts: `
console.log('Card component loaded');
`,
middleware: [
async (props) => ({
...props,
title: props.title.toUpperCase()
})
]
});
<%- await renderComponent('Card', {
title: 'Hello World',
content: 'This is a card component'
}) %>
ejsx.layouts.set('dashboard', (slots) => `
<div class="dashboard">
<nav>${slots.nav || ''}</nav>
<aside>${slots.sidebar || ''}</aside>
<main>${slots.content || ''}</main>
</div>
`);
<% slots.nav = await renderComponent('Navbar', { user }) %>
<% slots.sidebar = await renderComponent('Sidebar', { menu }) %>
<% slots.content = `
<h1>Dashboard</h1>
${await renderComponent('Stats', { data })}
` %>
<%- await renderLayout('dashboard', slots) %>
// Add middleware to transform props
ejsx.use('Button', async (props) => ({
...props,
text: `👉 ${props.text}`
}));
// Add a pre-render hook
ejsx.addHook('beforeRender', async (data) => ({
...data,
user: await fetchUser(data.userId)
}));
// Enable hot reloading in development
if (process.env.NODE_ENV === 'development') {
ejsx.watchComponents('./components');
}
For comprehensive documentation, visit https://ejsx.sryden.com
Contributions are welcome! Please read our Contributing Guide for details on our code of conduct and the process for submitting pull requests.
This project is licensed under the MIT License - see the LICENSE file for details.
EJSX is built on top of the excellent EJS templating engine.
FAQs
Enhanced EJS templating with components, layouts, and modern features
The npm package @sryden/ejsx receives a total of 6 weekly downloads. As such, @sryden/ejsx popularity was classified as not popular.
We found that @sryden/ejsx demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.