
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
aiida-explorer
Advanced tools
[](https://www.npmjs.com/package/aiida-explorer)
A React component to explore AiiDA provenance built on top of the AiiDA REST API.
The tool allows you to explore the graph of nodes, view detailed metadata, and track node visits with interactive breadcrumbs.
This repository contains
AiidaExplorer component (library), which is also published to npm; andverdi restapi), but might depend on the browser security settings (confirmed working with Firefox).Main features include:
The demo page can be used to explore your own AiiDA database. To do this, start the REST API locally:
verdi -p <profile-name> restapi
and explore it at https://aiidateam.github.io/aiida-explorer/?api_url=http://127.0.0.1:5000/api/v4.
(Note that some browser extensions might block access to localhost, and should be disabled for this to work).
Alternatively a cli tool is avaible that allows provides a interface to select the profile to explore.
npx aiida-explorer # requires node https://nodejs.org/en/download
Install via
npm install aiida-explorer
And use with the following:
import { AiidaExplorer } from "aiida-explorer";
...
<AiidaExplorer restApiUrl={AIIDA_REST_URL} />
...
where restApiUrl is the base url of the AiiDA REST API, e.g. http://localhost:5000/api/v4 if started locally via verdi restapi. For more details see the source code of the demo page.
One can also manage the rootNode state outside the component (e.g. to sync with URL parameters), then one should use
<AiidaExplorer
restApiUrl={AIIDA_REST_URL}
rootNode={rootNode}
onRootNodeChange={onRootNodeChange}
/>
We use the prefix ae to isolate tailwind classes (ae:bg-slate-50).
For development, start the demo page by
npm install
npm run dev
To build the component library and test locally in an external application (e.g. before publishing to npm), use
npm run build:lib
npm pack
which will create a .tgz file that can then be installed by the external application via
npm install /path/to/aiida-explorer-x.y.z.tgz
To make a new version and publish to npm via GitHub Actions:
npm version [major|minor|patch]
git push --follow-tags
(Note: no need to write the version number manually!)
The demo page is deployed to Github pages automatically from the main branch.
Additionally, any pull request gets deployed in it's own subpath as well.
Manual deployment to Github pages should not be done, as that might break any PR previews.
FAQs
[](https://www.npmjs.com/package/aiida-explorer)
The npm package aiida-explorer receives a total of 764 weekly downloads. As such, aiida-explorer popularity was classified as not popular.
We found that aiida-explorer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.