
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@tikui/core
Advanced tools
Tikui core is the heart of Tikui. Combined to a documentation and some configurations you will be able to create a Tikui project.
You can use it by using Tikui CLI.
The other way to use it is on a node project as a dependency, here is an example of use:
mkdir example-project
cd example-project
npm init
# Follow instructions
npm i @tikui/core tikuidoc-tikui sass
echo '{"documentation": "tikui"}' > tikuiconfig.json
mkdir src
npx tikui-core serve
Tikui is started, you may see how sources are organized to understand how to organize your components by looking at the Tikui sources structure.
npm i
Tikui core contains integration and unit tests to specify features, you have to launch tests using npm:
npm test
Then you can add other tests to make a new feature and when all your feature tests are green you can create a Pull Request.
If you want to check the served generated Tikui is correct, please launch:
npm run component-test:open
Then you can add new Cypress scenarios and tests.
It's also possible to launch Component Tests in preview mode using:
npm run component-test:build
npm run component-test:preview:open
FAQs
Tikui core
The npm package @tikui/core receives a total of 4,540 weekly downloads. As such, @tikui/core popularity was classified as popular.
We found that @tikui/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.