Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Aurum.js is a DOM rendering library inspired by react and angular. In Aurum you use stream based programing (Similar to rx.js) for data management. You link your streams directly to the DOM be it into attributes, inner text or inner html, you keep your UI up to date all through streams. Components in aurum never "rerender" react style, there is no reconciliation, no watching no dirty checking and no guesswork on what will cause things to render because all DOM changes are directly tied to a data stream.
Aurum encourages writing UIs in a way that makes them update faster in response to data changes than even in popular modern libraries like react, vue or angular
Aurum does most of the data management overhead for you, saving time and allowing to focus on what matters: Implementing your business logic
Aurum has very few concepts and a small API, you can get a full understanding of Aurum.js in record time.
Aurum is completely built around the stream pattern, pipe your data from the backend over adapters all the way into the DOM
All chromium based browsers
Edge
Firefox
Safari
IE11 (requires several polyfills and your code bundler needs to downlevel the code to ES5 but it works)
Install:
$ npm install aurumjs
To use Aurum you need to compile JSX or TSX using babel or the typescript compiler.
Example .babelrc
{
"presets": [
"@babel/preset-env",
],
"plugins": [
[
"@babel/transform-react-jsx",
{
"pragma": "Aurum.factory"
}
]
]
}
In tsconfig.json put the jsxFactory option
"compilerOptions": {
"jsxFactory": "Aurum.factory"
}
Simple Aurum app to render a div with text in the DOM:
import {Aurum} from 'aurumjs'
Aurum.attach((<div>Hello Aurum</div>), document.body)
TODO App with creation, deletion drag and drop, editing and marking as done of tasks all under 100 lines of code with aurum: https://codepen.io/cyberphoenix90/pen/LYYMwVr
FAQs
Stream based declarative DOM rendering library for javascript
The npm package aurumjs receives a total of 5 weekly downloads. As such, aurumjs popularity was classified as not popular.
We found that aurumjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.