Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@uking/marmot
Advanced tools
A lightweight and fast javascript native template rendering engine that supports browsers, FibJS and NodeJS.
A lightweight and fast javascript template rendering engine that supports browsers, FibJS and NodeJS.
render(html`...`,components,data,context,slots)
html
is a tagged template literal function that returns a Template
object.components
is an object that contains all the required components.data
is an object that contains all the data for the template.context
is an object that contains the context for the template.slots
is an object that contains the slots for the template.npm install @uking/marmot
//or
yarn add @uking/marmot
//or
pnpm add @uking/marmot
const {html,Component,render} = require('@uking/marmot')
class Layout extends Component {
data(){
console.log(this.context)
return{
//
}
}
render(){
return html`
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>{{title}}</title>
<Slot name="header" />
</head>
<body>
<Slot />
</body>
</html>
`
}
}
class Page extends Component {
// Register required components
components(){
return {
Layout
}
}
data(){
return {
data:['test1','test2','test3'],
color:'red',
cls:"class test" //can not use "class" as a variable name in js
}
}
render(){
return html`
<Layout title="this is layout title">
<Template slot="header">
<style>
body{
font-size:16px;
color:{{color}};
}
</style>
</Template>
<h2>{{title}}</h2>
<div>this is body content</div>
<ul>
<li v-for="item in data" class="x" :class="cls">{{item}}</li>
</ul>
</Layout>
`
}
}
let str = render(html`<Page title="this is Page title" />`,{Page})
console.log(str)
//or
let data = {
color:'red',
data:['test1','test2','test3']
}
// with context, the context can be passed to child components
let ctx = {
a:1,
b:2
}
let str2 = render(html`<Page title="Test" />`,{Page},data,ctx)
console.log(str2)
FAQs
A lightweight and fast javascript native template rendering engine that supports browsers, FibJS and NodeJS.
We found that @uking/marmot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.