
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
eth-gas-price-visuals
Advanced tools
A boilerplate for react-hyperscript using browserify with beefy and ES6.
A composable boilerplate for writing Ethereum dapps in a similar environment to what the MetaMask developers use themselves to develop MetaMask.
Forked from my older react-hyperscript-beefy-boilerplate, which is not Ethereum specific.
I've been contributing to MetaMask for a while, and I wanted to make a web dapp with ethjs that used a similar build system.
My friend Jared said it was a nice little framework, and I should do a better job of sharing it.
It also crossed my mind that this framework could be good practice for onboarding MetaMask contributors.
Have node.js installed, then in the project folder:
npm install
To run with live-reloading via beefy:
npm start
To build:
npm run build
This will generate a bundle.js file that is pointed to by the index.html.
./index.html <- The entry point for the app
./index.js <- The JS init entry point for the app, unbuilt.
./app <- The usually edited react views
├── root.js <- The home page, which could host routing, and has full state.
└── template.js <- Copy this to create views with full state access.
├── components <- The components that rely on local state
│  ├── download-metamask.js <- A sample local React component, with customized style params!
│  └── template.js <- Copy this to create your own components
./lib
├── reducers
│  └── index.js <- The root React Redux reducer file.
└── store.js <- The redux store, instantiated with thunk and logging.
./bundle.js <- The built JS bundle, generated by `npm run build`.
FAQs
A boilerplate for react-hyperscript using browserify with beefy and ES6.
The npm package eth-gas-price-visuals receives a total of 0 weekly downloads. As such, eth-gas-price-visuals popularity was classified as not popular.
We found that eth-gas-price-visuals demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.