
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
generator-ui5
Advanced tools
Master = Development branch, therefore what you see on Github is the development version. Check the NPM Package for the last stable version and the matching readme.
npm install -g grunt-cli && npm install -g bower && npm install -g yo && npm install -g phantomjs && npm install generator-ui5 -g && yo ui5 && grunt run
grunt tdd a tryMaster-Detail template is not 100% functional at this point
This is a yeoman generator check the basics: http://yeoman.io/learning/index.html
npm install -g grunt-clinpm install -g bower npm install -g yonpm install -g phantomjsnpm install generator-ui5 -g
hint: run the same command to update the generator (or yo )
Create an empty folder, open the terminal and call:
yo ui5 && grunt run
yo will install everything for you. A browser should open after installation.
Master-Detail template is not 100% functional at this point
Generator prefixed with u_ update/change existing files.
yo ui5:spage
Generates everything for a new master&detail page. Navigation pattern is hierarchical and should always be done from a detail to a detail page.
localhost:8000#vacancy/00000001 => localhost:8000#vacancy/00000001/applicant/0000000091
Input is a route e.g vacancy || vacancy/0001/application/0001.
call in any detail.controller
this.navTo('application.Detail', {application: '123' });
yo ui5:vcvacancy/application is at controller/application an not controller/vacancy/applicationyo ui5:vc
Generate a view and a controller. Dots within the name are resolved to folder.
yo ui5:fragment
Fragments with and without dialog template
yo ui5:u_changenamespace
Helper to change the ui5-namespace in a project. This is done by simple string matching. Therefore the old and new namespace string must be unique over all files.
The project is based on the sap openui5 templates.
grunt run
staticTest/sap/opu/:
/stubsgrunt staticTest
- linting and beautifiergrunt test
grunt build
grunt upload
grunt deploy
grunt tdd
Have a look at package.json or userConfig.json. If you want change project settings.
IF you check this project out, you should do the following steps.
npm install && bower installKarma is configured for chrome and phantomjs, therefore you should install chrome.
There are pros and cons about using karma
Check and keep projects dependencies up to date with ncu. Install the latest versions with:
ncu -a
https://code.visualstudio.com/
Don't forget the linter plugin https://marketplace.visualstudio.com/items?itemName=dbaeumer.vscode-eslint
Try the following packages:
atom-ui5-features
auto-update-packages
color-picker
docblockr
file-icons
git-projects
highlight-selected
hyperclick
js-hyperclick
linter
linter-csslint
linter-eslint
linter-htmlhint
pigments
ui5-snippets
you can also use tern(code-completion). The npm package tern-openui5 is already included for you. Unfortunately it seams to be out of maintenance.
atom-ternjs
Read the atom-ternjs readme
Use npm version patch to create git-version tags before shipping your apps.
Copy this version into the manifest file.
You can read the version on the client side from the component:
this.getManifestEntry("/sap.app/applicationVersion/version");
Help is welcome,
open an issue before you start working.
generator: fix masterDetail template files
generator: tests
project: grunt refactor config for testing with karma
project: ship task build, test, new version, sync version with manifest.file. GetVersion() in Component.js & Add an about dialog fragment. upload
subGenerator: for (webapp/util.js & test/util.js) like baseController, pages, spages
project: linting for xml and html files
project: convert all grunt tasks to npm scripts.
FAQs
yeoman-generator for openui5
We found that generator-ui5 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.