
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
create-replicache-app
Advanced tools

This repository contains quickstarts and sample code for Replicache. There are multiple option to run various frontend framework with a common express server backend. The backend utilizes the replicache-express library which implements the push
, pull
, poke
, createSpace
, and spaceExists
handlers required for Replicache sync protocol. This library intends to help developers easily experiment with various frontend frameworks integrated with Replicache.
$ npx replicache get-license
VITE_REPLICACHE_LICENSE_KEY
environment variable$ export VITE_REPLICACHE_LICENSE_KEY="<your license key>"
$ npm install; npm run build;
$ npm run watch --ws react
Provides an example integrating replicache with react in a simple todo application.
Provides an example integrating replicache with vanilla typescript in a simple todo application. This library utilizes W3C standard web-components. It does not have any requirements to run any external library frameworks.
$ npm run watch --ws ts-web-component
The server can serve the output of the various frameworks and be run as a static server to simulate a production environment.
$ npm run prod --ws <framework>
A render blueprint example is provided to deploy the application.
$ cp render.yaml.example render.yaml
Open the YAML file and modify the following lines to the appropriate framework
name: replicache-quickstarts-todo-<framework> # change e.g. (replicache-quickstarts-todo-<framework>)
startCommand: "cd ./client/<framework> && npm run prod"
Commit the changes and follow the direction on Deploying to Render
FAQs

We found that create-replicache-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.