
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@zenso/zenso-vite-plugin
Advanced tools
Vite plugin for Zenso e-ink plugins: Liquid dev render, manifest/build emit, plugin.zip pack
Vite plugin for Zenso e-ink plugins: Liquid dev rendering,
manifest.json / index.liquid build emit, and plugin.zip packing — by
convention (src/* in, dist/ out, no path options).
Extracted from
zenso-plugin-template
so all plugin projects share one build system.
npm i -D @zenso/zenso-vite-plugin
Requires Node 22+ and vite 6 or 7 (peer).
// vite.config.ts
import { defineConfig } from 'vite';
import { zensoPlugin } from '@zenso/zenso-vite-plugin';
export default defineConfig({
plugins: [zensoPlugin({ zip: true, generateMockData: true })]
});
Build defaults (outDir, rollup inputs/outputs) come from the plugin's
config() hook — your own build values in vite.config.ts merge over them.
| Option | Default | Meaning |
|---|---|---|
generateMockData | true | Derive config-based mock layers + sync sparse mock/plugin.json (dev only). false renders files + inline data only. |
mock | — | Inline mock data, highest-precedence layer. Spread imported JSONs: zensoPlugin({ mock: { ...zensoMock, ...pluginMock } }). Top-level user/device/system keys fold into the zenso scope. |
zip | true | Pack dist/ into plugin.zip after build. Object overrides zip-pack options, false disables. |
src/index.liquid with the resolved mock context on /,
injects dev asset refs (/src/* + HMR client), watches template / mocks /
zenso.config.json / package.json with full reload. Mock layers
(highest wins): inline mock: → mock/plugin.json → mock/zenso.json →
derived defaults. zenso.system.timestamp_utc is stamped live per render.dist/index.liquid (production head assets),
dist/manifest.json (allowlisted merge of zenso.config.json +
package.json; fails fast on empty name / non-SemVer version),
bundled dist/assets/*, then packs plugin.zip.src/main.ts) is bundled when the script capability is set.The only registered Liquid filter is asset_url
(e.g. {{ 'assets/logo.png' | asset_url }}).
See the template repo for the full plugin-authoring guide
(conventions, config_schema, data_sources, deployment).
See DEVELOPMENT.md for the release process.
MIT
FAQs
Vite plugin for Zenso e-ink plugins: Liquid dev render, manifest/build emit, plugin.zip pack
The npm package @zenso/zenso-vite-plugin receives a total of 11 weekly downloads. As such, @zenso/zenso-vite-plugin popularity was classified as not popular.
We found that @zenso/zenso-vite-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.