
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Event-driven typescript frontend framework created for multipage SPA
KUBApplication class - A SPA client app instance.
Create new App
createApp(): KUBApplication
Start App
launchApp(): void
Render elements on top static layer
renderOnDesktop(...views: HTMLElement[]): void
Configure new route on a client side
configurePage(route: string, pageToRender: new (props?: any) => IKUBPage): void
Configure 404/not-found page on a client side
setPage404(page404: KUBPageType): void
Callback for decorating how pages will swap
decorateSwapPages: (previosPage: IKUBPage, nextPage: IKUBPage) => Promise<void>
Fired when path changes
onRouteChange: (newRoute: string) => void = () => undefined
Fired when new page renders
onPageRender: (event: IPageRenderEvent) => void = () => undefined
Fired when page for requested path on client side was not found
onPageNotFound: (event: IPageNotFoundEvent) => void = () => undefined
@depracated
onLaunch: VoidFunction = () => undefined
@depricated
onFirstRender: VoidFunction = () => undefined
Get application view
static GET_APP_WINDOW(): HTMLElement
Get desktop layer view
static GET_DESKTOP_LAYER(): HTMLElement
KUBPage abstract class - client app page
Render page to the App
async RenderPage(callback = () => undefined): Promise<void>
Remove page from the App
async RemovePage(callback = () => undefined): Promise<void>
Get page root element
getViewRoot(): HTMLElement
Do before being mounted to the screen
protected onBeforeRender: () => Promise<void>
Do when page is rendered to the screen
protected onAfterRender: () => void
Do before page being removed from the screen
protected onBeforeRemove: () => Promise<void>
@under-rewrite
@under-rewrite
FAQs
Lightweight frontend framework for multipage SPA
We found that kuebox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.