
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@tago-io/custom-widget-core
Advanced tools
Framework-agnostic core for TagoIO Custom Widget SDKs. Provides the postMessage bridge, external store, realtime strategies, type definitions, and utility functions shared by all framework adapters.
npm install @tago-io/custom-widget-core
Most consumers should install
@tago-io/custom-widget-reactinstead, which re-exports everything from core.
The central state manager. Handles communication with the TagoIO platform via postMessage and maintains widget state.
import { WidgetStore } from "@tago-io/custom-widget-core";
const store = new WidgetStore({
realtimeStrategy: "merge", // "replace" | "append" | "merge"
realtimeMaxRecords: 1000, // max records for "append" strategy
allowedOrigins: ["https://admin.tago.io"], // optional origin validation
readyOptions: { header: { color: "#333" } },
});
store.initialize(); // sends ready signal to platform
store.subscribe(() => console.log(store.getSnapshot()));
Low-level postMessage communication with origin validation and request/response correlation.
Pure functions for handling incoming realtime data:
merge or replace, since append does not dedupe resource blocks)import {
autoFillRecords,
groupByVariable,
groupByDevice,
getLatestByVariable,
formatValue,
formatDate,
shallowEqual,
} from "@tago-io/custom-widget-core";
All types are exported: TWidget, TDataRecord, TDataRecordInput, TRealtimeData, TResource, TResourceGroup, TResourceEditInput, TUserInformation, WidgetState, etc.
FAQs
Framework-agnostic core for TagoIO Custom Widget SDKs
The npm package @tago-io/custom-widget-core receives a total of 72 weekly downloads. As such, @tago-io/custom-widget-core popularity was classified as not popular.
We found that @tago-io/custom-widget-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.