
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Mini dev-tools in a context menu within your React UI
Install my-project with npm
npm i fdevtools
Import fdevtools and styles
import FDevTools from "fdevtools";
import "fdevtools/dist/styles.css"
If you want the code modifying feature add this to your "start dev server" script
Vite
"dev": "node node_modules/fdevtools/dist/codeMonger/index.cjs & vite",
NextJS
"dev": "node node_modules/fdevtools/dist/codeMonger/index.cjs & next dev",
This will start a local node server that will modify the code in your project when requested
If you don't want the code modifying feature set the disableCodemonger prop to true
<FDevTools disableCodemonger={true}>
<App />
</FDevTools>
Add FDevTools to you React or NextJS project
createRoot(document.getElementById("root")!).render(
<StrictMode>
<FDevTools>
<App />
</FDevTools>
</StrictMode>
);
The context menu should open when "control + right clicking" on any element
Tailwind won't load all classes when your dev server is started. To fix this you will need to update your tailwind.config.js file and add
safelist: [
{ pattern: /.*/ }, // Include all tailwind classes
],
Making this modification will make your dev server first load slower since it has to load all existing Tailwind classes.
Hold ctrl key to highlight elements

Ctrl + right click will open the context menu
Press the paper and pen icon next to "Classes" to edit them

Adding classes into the input separated by space and pressing enter will add them to the selected element in the DOM. Existing or added classes can be deleted by just clicking on them.
Out of editing mode clicking on a class will copy it to the clipboard

FAQs
A dev-tools context menu in your react or nextJS app
We found that fdevtools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.