
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
NEW! Blossom 1.0 was released on May 28, 2012. Here's the release notes:
Blossom is a business application framework written in JavaScript and targeting tablet, mobile, and desktop browsers. It is based on Apple's SproutCore application framework.
Blossom is primarily being used as the basis for re-usable, model-driven business application shells across desktop, tablet and mobile browsers. As such, there is no public documentation or support for Blossom itself, and none will be forthcoming. Blossom is not an end-user product.
Instead, Blossom development is being supported by specific application shell providers, for example, xTuple's Postbooks 4.0, which can be found here.
Blossom only includes a very minimal set of built-in widgets, but makes developing new widgets extremely easy. Because Blossom is mean to be used in the context of specific, re-usable application shells, the widgets are expected to be custom-build for these shells.
Designed specifically for tablets and mobile browsers, Blossom extends the reach of traditional SproutCore applications to these resource-constrained environments by re-architecting the view layer to be HTML and CSS-independent.
Blossom is especially well-suited to data-driven, business-type applications.
Blossom also extends the kinds of apps that can be written in JavaScript by implementing an easy-to-use, high-performance animation subsystem that leverages hardware acceleration on the GPU whenever possible. The API is roughly based on Apple's Core Animation framework, and provides similar capabilities in modern web browsers.
Blossom's developer tools run on Node.js with an MIT license, and Blossom itself is licensed under the GPLv3.
If you are interested in using Blossom as the basis for your own business application shell, please contact Lauren Ocean at locean@fohr.com.
Watch this repository on GitHub to follow development, or fork it and submit a pull request to help contribute to it's evolution.
Blossom was conceived and written by Erich Ocean at Fohr eocean@fohr.com, and is based on the SproutCore version 1.4.5 release.
FAQs
Modern, Cross-Platform Application Framework
We found that blossom demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.