
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
libui-napi
Advanced tools
Node.js bindings for libui library.
libui is a lightweight, portable GUI library that uses the native GUI technologies of each platform it supports.
It is in early stage of development, but is evolving at great pace and is really awesome. It could become an awesome alternative to Electron to develop multiplatform GUI, expecially suited to develop small apps.
macOS

Linux

Windows

All prebuilds are build on CI and afterwards downloaded and published in the npm install phase. Prebuild t binaries are available for the following platforms:
If you are using one of these platform, you don't need to recompile libui-node source code from scratch.
The only additional dependecy you nedd is GTK+ 3 to run on Linux.
Otherwise, libui-node sources will be compiled during part of the install
phase. You need the following additionl dependency in order to compile:
If they are not provided by default in your distribution:
npm install -S libui-node
libui prebuilt binaries are automatically downloaded after install.
If you get this error on Windows:
'__pfnDliNotifyHook2': redefinition; different type modifiers
you need to install latest npm version:
$ npm i -g npm
see this node-gyp issue for more details.
Documentation is in docs folder. You can also find working examples in example folder.
First, you have to clone the GitHub repo and npm install it:
git clone https://github.com/parro-it/libui-node.git
npm install
Then, to run the control gallery example (requires Node.js >= 6), type:
node example/core-api.js
|
|
|
---|---|---|---
Andrea Parodi | Juha Järvi | Niklas Mischkulnig | Gustav Hansen
The MIT License (MIT)
Copyright (c) 2018 parro-it
FAQs
Experimental bindings for libui using n-api
The npm package libui-napi receives a total of 1 weekly downloads. As such, libui-napi popularity was classified as not popular.
We found that libui-napi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.