
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
A Svelte-host TUI framework for Node.js - Build terminal interfaces with the power of Svelte
A Svelte-host TUI framework for Node.js - Build terminal interfaces with the power of Svelte
FerroFrame brings the declarative, component-based approach of Svelte to terminal user interfaces. Write TUIs using familiar web development patterns while leveraging Svelte's reactivity and compilation optimizations.
# Create a new FerroFrame app
pnpm create ferroframe my-tui-app
cd my-tui-app
pnpm install
pnpm dev
pnpm add @ferroframe/core @ferroframe/components
<!-- App.svelte -->
<script>
import { Box, Text, Input, Button } from '@ferroframe/components';
let name = '';
let submitted = false;
function handleSubmit() {
submitted = true;
}
</script>
<Box direction="column" padding={1}>
<Text bold color="cyan">Welcome to FerroFrame!</Text>
{#if !submitted}
<Box direction="row" gap={1}>
<Text>Name:</Text>
<Input bind:value={name} placeholder="Enter your name" />
</Box>
<Button on:click={handleSubmit} disabled={!name}>
Submit
</Button>
{:else}
<Text color="green">Hello, {name}! 👋</Text>
{/if}
</Box>
// main.js
import { FerroHost } from '@ferroframe/core';
import App from './App.svelte';
const host = new FerroHost();
await host.mount(App);
FerroFrame uses a host-based architecture where:
Box - Flexbox containerText - Styled text renderingInput - Text input fieldButton - Interactive buttonList - Selectable listTable - Data tablesProgress - Progress barsSpinner - Loading indicators# Clone the repository
git clone https://github.com/yourusername/ferroframe.git
cd ferroframe
# Install dependencies
pnpm install
# Run tests
pnpm test
# Build packages
pnpm build
# Run examples
cd examples/hello-world
pnpm dev
Check out the examples directory for:
Contributions are welcome! Please read our Contributing Guide for details.
MIT © Profullstack, Inc.
Status: 🚧 Under active development - MVP in progress
FAQs
A Svelte-host TUI framework for Node.js - Build terminal interfaces with the power of Svelte
We found that ferroframe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.