
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
dblsqd-electron
Advanced tools
This module provides a drop-in auto-update solution for Electron applications.
You can install dblsqd-electron via npm. Add dblsqd-electron to the
package.json
of your your Electron app or install it via the command-line:
npm i --save dblsqd-sdk
You can add a complete auto-update UI to your Electron app with two lines of
code (or four lines if you insist on counting the require
statements):
const {Feed} = require("dblsqd-sdk")
const {UpdateWindow} = require("dblsqd-electron")
let feed = new Feed("https://feeds.dblsqd.com/:app_token", ":channel", ":os", ":arch")
let updateWindow = new UpdateWindow(feed)
UpdateWindow
can display an icon when the icon
option is set:
new UpdateWindow(feed, {icon: "/path/to/icon.svg"})
By default, an UpdateWindow
is shown automatically when a new update is
available. You can change this with the showOn
option:
//Default behavior: Show when new update is available
new UpdateWindow(feed, {showOn: "will-quit"})
//Show when will-quit event is fired by Electron app
new UpdateWindow(feed, {showOn: "will-quit"})
//Only show when show() is called manually.
new UpdateWindow(feed, {showOn: "manual"})
FAQs
Drop-in Electron UI for DBLSQD
The npm package dblsqd-electron receives a total of 1 weekly downloads. As such, dblsqd-electron popularity was classified as not popular.
We found that dblsqd-electron demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.