
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
laxar-developer-tools-content
Advanced tools
The content application for the laxar-developer-tools-widget and laxar-developer-tools-web-extension
This is an application using the LaxarJS developer tooling API. The laxar-developer-tools-widget and the laxar-developer-tools-extension embed this application.

The events tab displays the latest publish/subscribe events of the currently running application, including subscribe/unsubscribe calls, as well as publication and delivery of events. Events may be filtered by name, pattern, or source/target.

This "fusebox" view of the running application visualizes which widgets are connected through shared topics. See below for more information on how to enable page inspection.
The log tab lists log messages that were created using the laxar.log API.
You can also use the browser console to inspect these messages without opening the developer tools.
In the page tab, area nesting (blue connections) will work out of the box. The standard LaxarJS patterns resource, action and flag are also supported, but additional markup needs to be added to your widget.json files for visualization to work:
Configurable topics must use "format": "topic" in their JSON schema (with the exception of flag-receivers, which should use "format": "flag-topic" to support negated flags). For validation, this is recommended anyway.
Configurable topics must specify the new field "axRole":
"outlet" must be used for topic publishers (resource masters, action triggers, flag providers),
"inlet" must be used for topic subscribers (resource slaves, action/flag handlers).
If not evident from the configuration path, the field "axPattern" must be specified to indicate the standard pattern (one of "resource", "action", "flag") associated with the field.
For example, a widget that is master for a configurable user.resource would use the following JSON schema snippet, with description fields omitted in favour of brevity:
"features": {
// ...
"user": {
"type": "object",
"properties": {
"resource": {
"type": "string",
"format": "topic",
"axRole": "outlet"
}
}
}
}
Alternatively, a widget/activty that subscribes to order.onActions would use this:
"features": {
// ...
"order": {
"type": "object",
"properties": {
"onActions": {
"type": "array",
"item": {
"type": "string",
"format": "topic",
"axRole": "inlet"
}
}
}
}
}
Finally, a widget/activty that processes a flag visibility.toggleOn would use this:
"features": {
// ...
"visibility": {
"type": "object",
"properties": {
"toggleOn": {
"type": "string",
"format": "flag-topic",
"axRole": "inlet",
"axPattern": "flag"
}
}
}
}
The page inspector simply ignores configuration values that cannot be unambiguously assigned to a specific pattern and role.
Compositions are supported as well, just make sure to add "format' and "role"
FAQs
The content application for the laxar-developer-tools-widget and laxar-developer-tools-web-extension
The npm package laxar-developer-tools-content receives a total of 0 weekly downloads. As such, laxar-developer-tools-content popularity was classified as not popular.
We found that laxar-developer-tools-content demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.