
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Use this to compose and load your application modules.
Holocron maintains an in-memory registry of Modules that can be updated dynamically without requiring a server restart. The idea is that an application can update Holocron's module registry whenever a new Holocron Module is to be added to the application's runtime. The end result is an application that can have React components updated/added to it at runtime.
After the server is initialized the holocron store is created within createHolocronStore
, this
extends the Redux store and adds the reducers of your module to the store.
Once the modules to render are retrieved we dispatch composeModules
to get the data for these
modules, this data is needed for rendering.
Check out the API reference guide.
To test out any changes that you've made locally, run yarn pack
then install this within your
application.
The scripts below are available to run and use:
yarn prebuild
This removes any existing files generated during the build process and ensures that any new build is clean.
yarn build
This deletes the current generated JS files within the directory and compiles the ECMAScript 6 code
within the src
file to a version of ECMAScript that can run in current browsers using Babel
afterwards it copies them to the lib folder.
yarn prepublish
This runs yarn build
yarn watch:build
This watches for any changes in the src
folder and runs yarn build
if any changes are
detected.
FAQs
Use this to compose and load your application modules.
The npm package holocron receives a total of 767 weekly downloads. As such, holocron popularity was classified as not popular.
We found that holocron demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.