
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A declarative engine for building native desktop applications with web technologies, designed for LLM architects.
This is your application's workspace. Welcome to the future of declarative, AI-symbiotic desktop development.
Your primary task is not to write traditional, imperative code. Your role is to architect the application by defining its structure, data, and logic in the manifest files.
/manifestThis is the brain of your application. Start here.
manifest/connectors.js: Define your data sources.manifest/components.js: Register your React UI components.manifest/routes/: Describe the business logic (views and actions).manifest/bridge.js: Whitelist any native OS functions your app needs.manifest.js: Configure your app's window, theme, and global settings./app and /public/app/components/: Place your React components (.jsx) and their stylesheets (.css) here./app/actions/: Place reusable, complex JavaScript functions here./app/bridge/: Place custom Node.js modules for OS interaction here./public/: Place static assets like images and fonts here. The in-app path will be /public/your-asset.png.To set the icon for your packaged application (.exe, .dmg):
build folder in the root of this app directory (packages/app/build/).icon.ico (for Windows), icon.icns (for macOS), and icon.png (for Linux).package.json is already configured to use these files during the packaging process.All commands must be executed from the root directory of the monorepo.
npm run dev
npm run start
npm run package
FAQs
A declarative engine for building native desktop applications with web technologies, designed for LLM architects.
We found that axle-llm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.