
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
backbone.marionette
Advanced tools
The Backbone Framework
Marionette is dropping its dependency on Backbone. That library is available here: https://github.com/marionettejs/marionette
Until further notices changes to backbone.marionette will be limited to fixes. All new feature work will take place on marionette.
Marionette 4 is now available! See our upgrade notes for the differences between v3 and v4. Please let us know if you encounter any issues so we can resolve them and help us continue work on Marionette!
Marionette is a composite application library for Backbone.js that aims to simplify the construction of large scale JavaScript applications. It is a collection of common design and implementation patterns found in applications.
All of the documentation for Marionette can be found at
Backbone provides a great set of building blocks for our JavaScript applications. It gives us the core constructs that are needed to build small apps, organize jQuery DOM events, or create single page apps that support mobile devices and large scale enterprise needs. But Backbone is not a complete framework. It's a set of building blocks. It leaves much of the application design, architecture and scalability to the developer, including memory management, view management, and more.
Marionette brings an application architecture to Backbone, along with built in view management and memory management. It's designed to be a lightweight and flexible library of tools that sits on top of Backbone, providing the framework for building a scalable application.
Like Backbone itself, you're not required to use all of Marionette just because you want to use some of it. You can pick and choose which features you want to use. This allows you to work with other Backbone frameworks and plugins easily. It also means that you are not required to engage in an all-or-nothing migration to begin using Marionette.
Find us on gitter.
We're happy to discuss design patterns and learn how you're using Marionette.
Region and View objectsViews and CollectionViews within visual regionsViews, CollectionViewsa and RegionsBackbone.RadioYou can download the latest builds directly or visit the downloads section on the Marionette website for more downloading options.
Marionette is available via bower and npm:
# NPM
npm install backbone.marionette
# Bower
bower install marionette
Changelog: For change logs and release notes, see the changelog file.
Upgrade Guide: Be sure to read the upgrade guide for information on upgrading to the latest version of Marionette.
The source code for Marionette is heavily documented. You can read the annotations for all the details of how Marionette works and advice on which methods to override.
MarionetteJS currently works with the following libraries:
Marionette has not been tested against any other versions of these libraries. You may or may not have success if you use a version other than what is listed here.
If you would like to contribute to Marionette's source code, please read the guidelines for pull requests and contributions. Following these guidelines will help make your contributions easier to bring into the next release.
Report issues with Marionette, submit pull requests to fix problems, or to create summarized and documented feature requests (preferably with pull requests that implement the feature).
FAQs
The Backbone Framework
The npm package backbone.marionette receives a total of 89,117 weekly downloads. As such, backbone.marionette popularity was classified as popular.
We found that backbone.marionette demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.