Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@ssense/flip
Advanced tools
Flip is great for teams migrating from react to vue, or projects that want to employ micro front ends using both technologies.
It will consume your React components, and generate out a new directory full of Vue components.
Optionally, you can also roll them into one nice exported bundle per framework (i.e - bundle.react.js
, bundle.vue.js
) 📦
Flip initially started as a fork of this babel plugin and still uses a modified version of it under the hood.
yarn add -D @ssense/flip
To use, run
yarn flip [path-to-your-components]
This command also accepts an optional -b
flag, which will rollup bundles of each your react and vue components for distribution. This is how that will look:
yarn flip [path-to-your-components] -b
and it will generate the following folder structure:
- dist
| - react
| - button
| - form
| - vue
| - button
| - form
| - bundles
| - bundle.react.js
| - bundle.vue.js
While not necessary, flip is compatible with styled-components (it even handles remapping the react/vue styled component import 😎)
Please read our contribution guide for details on the development process, and the process for submitting a pull request
With any contribution, you accept all conditions implicitly defined in the Code of Conduct.
This project is licensed under the MIT License - see the LICENSE.md for more details
Quinn Langille - email
FAQs
A React to Vue Component Transpiler
The npm package @ssense/flip receives a total of 11 weekly downloads. As such, @ssense/flip popularity was classified as not popular.
We found that @ssense/flip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.