
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
framework7-component-loader
Advanced tools
Framework7 single-file router component loader for Webpack
Webpack loader for Framework7 single file router components
framework7-component-loader is a loader for webpack that allows you to author Framework7 Router components in a format called Single-File Components:
<!-- my-page.f7.html -->
<template>
<div class="page">{{msg}}</div>
<!-- Inline partials -->
{{> 'foo'}} {{> 'bar'}}
<!-- External partials -->
{{> 'external'}}
</template>
<!-- Template7 inline partial support (optional) -->
<template-partial id="foo">
<div>foo</div>
</template-partial>
<template-partial id="bar">
<div>bar</div>
</template-partial>
<script>
export default {
data() {
return {
msg: 'Hello world!',
};
},
};
</script>
<!-- external.f7p.html -->
<template>
<div>External template get scope context {{msg}}</div>
</template>
npm i framework7-component-loader
module.exports = {
...
module: {
rules: [
...
{
test: /\.f7.html$/,
use: [
'babel-loader',
{
loader: 'framework7-component-loader',
options: {
// path to file that exports array of Template7 helpers names
helpersPath: './src/template7-helpers-list.js',
// path where to look for Template7 partials
partialsPath: './src/pages/',
// Template7 partials file extension
partialsExt: '.f7p.html',
// When enabled it will minify templates HTML content
minifyTemplate: true,
}
}
],
},
...
]
}
...
}
To use Template7 helpers, we need to specify helpers names in separate file and specify path to file in helpersPath loader parameter. It is required because template is compiled on server side which doesn't know about helpers registered during app runtime.
So, if we use helpers named foo and bar in our templates, we need to register their names in file:
/* src/template7-helpers-list.js */
module.exports = ['foo', 'bar'];
And specify this file in loader options:
rules: [
...
{
test: /\.f7.html$/,
use: [
'babel-loader',
{
loader: 'framework7-component-loader',
options: {
// path to file that exports array of Template7 helpers names
helpersPath: './src/template7-helpers-list.js',
// ...
}
}
],
},
...
]
FAQs
Framework7 single-file router component loader for Webpack
We found that framework7-component-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.