
Security News
US Government Forces Anthropic to Pull Claude Fable Days After Launch
Anthropic says the directive cited national security concerns over a narrow jailbreak, but offered no specific technical details.
@vef-framework-react/dev
Advanced tools
A unified code generation entry point for the project: business systems author a
single code-generation.config.ts at the project root and the framework provides a
CLI per generator. Currently the only generator is Dictionary Keys;
future ones (i18n, apiSchema, ...) live alongside as additional fields in
the same config.
code-generation.config.ts at the project rootimport { defineCodeGenerationConfig } from "@vef-framework-react/dev";
export default defineCodeGenerationConfig({
dictionaryKeys: {
// Output is resolved against the project root and must stay inside it.
// Default: src/types/dictionary.gen.ts
output: "src/types/dictionary.gen.ts",
// Optional: abort the fetcher after this many ms. Default: 30000. Set to 0 to disable.
timeout: 30000,
fetchDictionaryKeys: async () => {
// Runs in Node, so use Node-side HTTP / DB clients with project credentials.
// Read environment from process.env so the same config works across dev / staging / prod.
const response = await fetch(`${process.env.API_BASE_URL}/api`, {
method: "POST",
headers: { Authorization: `Bearer ${process.env.CODE_GENERATION_TOKEN}` },
body: JSON.stringify({ resource: "sys/dictionary", action: "find_keys" })
});
const json = await response.json();
return json.data.map(({ key, remark }) => ({ key, comment: remark }));
}
}
// Future: i18n: { ... }, apiSchema: { ... }
});
Do not hardcode secrets in this file.
jiticaches transpiled config files undernode_modules/.cache/jiti; secrets in source land on disk. Always read tokens fromprocess.env.
DictionaryKey union from the backendGoal: callers of useDictionaryOptionsSelect (and other dictionary-aware
APIs) get IDE autocomplete and compile-time validation, sourced from the
project's backend dictionary registry rather than hand-maintained string
constants.
Constraints:
key must match /^[\w.-]+$/ (letters, digits, underscore, dot, hyphen).
Invalid keys abort the run — this prevents injection through the
generated file. If your existing keys use other characters (colon,
slash, CJK, etc.), please open an issue before upgrading so the
constraint can be evaluated.output is rejected if absolute or escaping the project root.# Regenerate the file
pnpm vef gen:dictionary-keys
# Verify the committed file is up-to-date (CI guard — REQUIRED in CI)
pnpm vef gen:dictionary-keys --check
Recommended package.json scripts:
{
"scripts": {
"gen:dictionary-keys": "vef gen:dictionary-keys",
"check:dictionary-keys": "vef gen:dictionary-keys --check"
}
}
src/types/dictionary.gen.ts is committed to source control. The file
augments Register["dictionaryKeys"] in @vef-framework-react/hooks, which
narrows the DictionaryKey union project-wide. Without augmentation it
falls back to string.
When TypeScript reports a key is not assignable to DictionaryKey, the most
common cause is that code generation has not been rerun after adding a new backend
key — try pnpm gen:dictionary-keys.
Add pnpm vef gen:dictionary-keys --check to the CI pipeline. It exits
non-zero when the committed .gen.ts is stale relative to what the fetcher
currently returns, surfacing drift before merge.
In CI logs (process.env.CI set), the command suppresses stack traces and
only prints the error message, avoiding leaking absolute workspace paths
in public logs.
Any of these aborts the CLI run with a non-zero exit:
code-generation.config.{ts,mts,js,mjs} at the project rootCodeGenerationConfig objectdictionaryKeys blockdictionaryKeys.fetchDictionaryKeys is missing or not a functiondictionaryKeys.output is set but not a stringdictionaryKeys.timeout is set but not a finite non-negative numberfetchDictionaryKeys throws or exceeds the timeout^[\w.-]+$ charset--check mode detects the committed file is staleSoft failures that warn but continue:
DictionaryKey = neverFAQs
Dev tools for VEF framework
The npm package @vef-framework-react/dev receives a total of 47 weekly downloads. As such, @vef-framework-react/dev popularity was classified as not popular.
We found that @vef-framework-react/dev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Anthropic says the directive cited national security concerns over a narrow jailbreak, but offered no specific technical details.

Security News
A network of 152 Chrome live wallpaper extensions hid ad tracking and made extension-driven traffic look like Google search clicks.

Company News
Socket’s first CISO brings deep experience securing high-growth SaaS companies as open source supply chain threats accelerate.