
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
kintone-framework
Advanced tools
A lightweight framework for Kintone JavaScript customizations.
Explore the docs »
View Demo
·
Report Bug
·
Request Feature
kintone-framework (kfw) is a lightweight, modular framework designed to streamline JavaScript customizations for Kintone applications. It provides a unified API to access Kintone objects, a REST API client integration, and an encapsulated UI component library, enabling developers to build sophisticated, maintainable Kintone apps efficiently.
(async () => {
// Initialize
await kfw.init();
kintone.events.on(kfw.str.app.record.create.show, async (event) => {
// Kintone REST API Client
const response = await kfw.api.record.getRecords({
app: 1,
query: "",
});
console.log("Records:", response.records);
// Kintone UI Component
const btn = new kfw.ui.Button({
text: "Submit",
type: "normal",
});
btn.addEventListener("click", () => {
alert("Hello world.");
});
// Kintone JavaScript API (app, portal, space only)
const spaceElement = kfw.app.record.getSpaceElement("Submit_Button");
if (spaceElement) {
spaceElement.appendChild(btn);
}
return event;
});
})();
kintone-framework supports installation via file upload, CDN, or NPM
kfw.min.js.kfw.min.js.Usage of the CDN is recommended solely for development purposes. For production environments, it is strongly advised to download the
kfw.min.jsfile directly from GitHub to mitigate any potential failures or issues associated with CDN delivery.
jsdelivr
https://cdn.jsdelivr.net/npm/kintone-framework@1.2.3/dist/kfw.min.js
// use a version range instead of a specific version
https://cdn.jsdelivr.net/npm/kintone-framework@1.2/dist/kfw.min.js
https://cdn.jsdelivr.net/npm/kintone-framework@1/dist/kfw.min.js
// omit the version completely to get the latest one
// you should NOT use this in production
https://cdn.jsdelivr.net/npm/kintone-framework/dist/kfw.min.js
unpkg
https://unpkg.com/kintone-framework@1.2.3/dist/kfw.min.js
https://unpkg.com/kintone-framework@1.2/dist/kfw.min.js
https://unpkg.com/kintone-framework@1/dist/kfw.min.js
https://unpkg.com/kintone-framework/dist/kfw.min.js
(async () => {
await kfw.init();
// Your code here
})();
Use kfw to access Kintone desktop and mobile App, Portal, and Space objects
| API | Description |
|---|---|
kfw.init() | Initializes the framework. |
kfw.isMobileApp | Boolean resolved from kintone.isMobileApp() |
kfw.str | Unified event string from app and mobile.app |
kfw.app | Unified object from kintone.app and kintone.mobile.app |
kfw.portal | Unified object from kintone.portal and kintone.mobile.portal |
kfw.space | Unified object from kintone.space and kintone.mobile.space |
kintone.events.on(kfw.str.app.record.create.show, (event) => {
console.log(kfw.isMobileApp);
console.log(kfw.str);
console.log(kfw.app);
console.log(kfw.portal);
console.log(kfw.space);
return event;
});
Refer to Kintone JavaScript API Documentation.
Use kfw.api to interact with Kintone REST API
const response = await kfw.api.record.getRecords({
app: kfw.app.getId(),
query: 'status = "In Progress"',
});
console.log(response.records);
Refer to Kintone REST API Client Documentation.
Use kfw.ui to access Kintone UI Components
const btn = new kfw.ui.Button({
text: "Click Me",
type: "submit",
});
kfw.app.record.getSpaceElement("Submit_Button").appendChild(btn);
Refer to Kintone UI Component Documentation.
git clone https://github.com/fathulfahmy/kintone-framework.git
npm install
npm run build
See the open issues for a full list of proposed features (and known issues).
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!
git checkout -b feat/amazing-feature
git commit -m 'feat: add some Amazing Feature'
git push origin feat/amazing-feature
Distributed under the MIT License. See LICENSE for more information.
Fathul Fahmy - LinkedIn - mfathulfahmy@gmail.com
Project Link: https://github.com/fathulfahmy/kintone-framework
FAQs
A lightweight framework for Kintone JavaScript customizations.
We found that kintone-framework demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.