Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This package provides the core infrastructure needed for doing hot code swapping in Elm. It supports Elm 0.19 only.
This low-level package is intended for authors of Elm application servers.
If you're looking for something that's easier to use, and you're willing to use Webpack, see elm-hot-webpack-loader, which is built using this package. Another option is Parcel which has built-in support for Elm and this package.
The goal of this package is to provide a reusable core that can be used to provide hot code swapping support in a variety of environments--not just Webpack.
Browser.Navigation.Key
changed locationModel
contains Json.Encode.null
elm-hot
core API$ npm install --save elm-hot
function inject(str)
Injects the hot code swapping functionality into a compiled Elm app.
eval
-ed in the browser.const elmHot = require('elm-hot');
const {compileToStringSync} = require('node-elm-compiler');
const injectedCode = elmHot.inject(compileToStringSync(["src/Main.elm"], {}));
In order to provide something similar to webpack-dev-server
with hot module reloading, an application server could be developed to do the following:
index.html
to receive push events from the server.elm
files on disk for changeselm-hot
to inject the hot-code-swapping logic)Elm
object and calls eval()
on the new code from the serverI have implemented something similar to this for the integration tests. See test/server.js and test/client.js for inspiration.
The above description is probably a bit too vague, so if you would like more details, create an issue.
Elm hot code swapping is based on the work of Flux Xu's elm-hot-loader.
FAQs
Hot code swapping for Elm
The npm package elm-hot receives a total of 11,130 weekly downloads. As such, elm-hot popularity was classified as popular.
We found that elm-hot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.