
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@viamrobotics/prime
Advanced tools
@viamrobotics/prime
@viamrobotics/prime
will soon be replaced by a few separate packages, all of which will export Svelte components and some will export web components. This package will be removed once those packages are supported.
PRIME is a collection of atomic UI elements, designed to "just work" in any HTML-based environment, regardless of framework or lack thereof. It is a web component library.
The PRIME NPM package contains the following necessary exports for usage:
prime.es.js
or prime.umd.js
- JS that defines custom elements. ES modules are recommended over UMD.prime.css
- stylesheet shared by all elements.If using ES modules, import Prime's JS file into your code:
import '@viamrobotics/prime';
You must host prime.css
in a static file server. This is every prime element loads it as a shared stylesheet.
If you are not hosting prime.css
at the root directory of your domain, you will need to add a PRIME_CONFIG global variable before loading the JS file:
<script type="module">
window.PRIME_CONFIG = {
base: '/path/to/static/folder',
query: '?v=someCacheBustingHashIfNeeded',
};
</script>
If the necessary .css
and .js
files have been added, then no additional imports are needed!
You can immediately start adding PRIME elements to your app, since prime elements are simply custom HTML elements:
<v-button label="Hello world!" />
All elements are prefixed with v-
. This stands for Viam, the cool company where these elements are made.
To use the playground, go to the playground
directory, and:
pnpm install
pnpm -C packages/legacy start
Or to run in production mode:
pnpm -C packages/legacy build
pnpm -C packages/legacy serve
To lint and typecheck:
pnpm -C packages/legacy lint
pnpm -C packages/legacy check
To test:
pnpm -C packages/legacy test-dev # to test with the playwright debug UI
# or
pnpm -C packages/legacy test # to test in headless mode
# to run specific tests
pnpm -C packages/legacy test <test-name> # for <test-name>.spec.ts
FAQs
## Note
We found that @viamrobotics/prime demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.