Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
code-sample-editor
Advanced tools
A multi-file code editor component with live preview
<code-sample-editor>
is a web component that allows you to embed multi-file, editable, live-preview code examples that use JavaScript, TypeScript, HTML and CSS. It's like a mini-IDE that you can embed many times in a page, and it works without a server!
<code-sample-editor>
uses a service worker to send files from the main page to the preview iframe. Users can edit examples locally and the edited files are served to the iframe without ever hitting the network. This means you can use <code-sample-editor>
with a static file server, and preview reloads are ultra-fast!
<code-sample-editor>
serves each file indivdually to the preview iframe, instead of bundling them first. This gives faster refresh times and means taht you can utilize the standard web platform features in your examples without a bundler getting in the way and potentially breaking things. The experience is very much like working wtih a static file server.
HTML can have multiple <script>
and <link>
tags, even dynamically added. CSS can use @import
and url()
. JavaScript can use import.meta.url
, dynamic import()
, and fetch()
. It all just works.
Standard JavaScript modules are great, but currently they lack one feature that has such overwhelming use and utility that we included support for it: base module specifiers.
If you import a module by name, like:
import {html, render} from 'lit-html';
<code-sample-editor>
will automatically rewrite the import specifier to use unpkg.com URLs:
import {html, render} from 'https://unpkg.com/lit-html?module';
Besides standard JavaScript, <code-sample-editor>
supports TypeScript files, which are automatically transpiled to JavaScript in a web worker.
The TypeScript worker behaves exactly like the tsc
compiler does, so the examples match local code. This means that when you import other TypeScript files, you do with with a .js
extension, which matches the compiler output.
my-element.ts
import {LitElement, html, customElement} from 'lit-element';
@customElement('my-element')
class MyElement extends LitElement { /* ... */ }
index.html
<script type="module" src="my-element.js"></script>
Note the filename of my-element.js
.
You can define an example entirely in HTML for simplicity:
<code-sample-editor>
<script type="sample/html" filename="index.html">
<script type="module" src="my-element.js"></script>
<h1>Hello World!</h1>
<my-element></my-element>
</script>
<script type="sample/js" filename="my-element.js">
import {LitElement, html, customElement} from 'lit-element';
class MyElement extends LitElement { /* ... */ }
customElements.define('my-element', MyElement);
</script>
</code-sample-editor>
Or define your project in a JSON manifest:
<code-sample-editor project-src="./example-1.json"></code-sample-editor>
example-1.json
:
{
"files": {
"index.html": {},
"my-element.js": {},
"my-second-element.js": {}
}
}
Install with npm:
npm i code-sample-editor
Load the component definition:
<script
type="module"
src="/node_modules/code-sample-editor/lib/code-sample-editor.js">
</script>
Use the component:
<code-sample-editor project-src="./example-1.json"></code-sample-editor>
<code-sample-editor>
uses bare module specifiers in its code, so you'll need a server that supports rewriting module specifiers with the Node module resolution algorithm, or a build tool like Rollup.
<code-sample-editor>
also uses import.meta.url
to load the worker scripts. note that Webpack does not support that currently.
After cloning the repo:
npm install
# runs npm run watch and npm run serve at the same time
npm run dev
Open your browser to http://localhost:8081/demo/
to see the demo.
The project is organized into multiple TypeScript projects, one for each browser/worker environment, and one shared project. They reference each other via TypeScript project references and are built together with the --build
flag to tsc
.
FAQs
A multi-file code editor component with live preview
The npm package code-sample-editor receives a total of 1 weekly downloads. As such, code-sample-editor popularity was classified as not popular.
We found that code-sample-editor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.