
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
express-partial
Advanced tools

Adds partial rendering support to Express so that you can render multiple templates in a single render call. Each template is provided its own template data object on render and the method, by default, will respond to the request with a json object containing the partial name and associated rendered html. Useful for when your frontend wants to request multiple templates in parallel, e.g. updating sections of a page using Ajax.
npm install express-partial
express-partial is a middleware that adds a renderPartials() method to the
res object. Initialize it with:
var express = require('express');
var partial = require('express-partial');
var app = express();
app.use(partial());
Then, use it within your routes with:
app.get('/partials', function () {
res.renderPartials({
hello: { data: 'for hello template' },
world: { data: 'for world template' }
});
});
which will render something like:
{
"hello": "<div>Hello template output</div>",
"world": "<div>World template output</div>"
}
res.renderPartials(partials, callback)Render multiple partials and send a json body response with the partial name as the object key and the rendered html string as its value. When a callback is provided, the possible error and partial name/rendered html object are passed and no automated response is performed.
Object - An object of partial name => locals data to render
String - The name of the partial to renderObject - The data object to send to the partial when renderingFunction - A callback function that is passed (err, renderedPartials)
Error - An error object when an error occurs during renderingObject - An object of partial name => rendered htmlFAQs
Adds partial rendering support to Express
We found that express-partial demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.