Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
bambis-basemvc
Advanced tools
A basic mvc package to arrange a project by the mvc/mpc architectural pattern
Motive
I always belived that MVC is a good pattern for web development, or handeling of data, then found myself writing web apps with Backbone.js and being heavily inspired by it, advancing to hybrid applications with Qt and QWebEngine, and later on Electron.
Having ES6 with module imports and several build tools at hand I believe we can have a very stable JS application environments that would not be a hit and miss, or a "trendy FW" like a totally transpiled language, or a component only closed based framework, just by having a library and some "aids" that would make us keep a correct design pattern while writing.
This is a very first attempt at this.
Lets see if it goes..
Documents about to come. but basically
npm install
the package, and
npm run build
, then
npm run browserDemo
hope everything works.. ;)
1.0.0 - First version, contains a Base Model, View, and Collection. Controller is the future opinionated way of wiring things together. theres a first step in assembling an inheritance for an eventbus library as all entities would be "eventable".
Main goal would be to create an engine of some sort which can parse controller files to actual working bundled units.
FAQs
A basic mvc package to arrange a project by the mvc/mpc architectural pattern
We found that bambis-basemvc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.