Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
liferay-amd-loader
Advanced tools
This repository holds the AMD Loader packed with Liferay DXP.
Note that, though it may be used outside of Liferay, it's very unprobable that it can be useful without the extensive support it gets from the server (for module resolution and load).
yarn
to install dependenciesyarn build
to build ityarn test
to run testsThis will build the loader in 'build/loader' directory. There will be three versions:
The default configuration and the demo require a combo loader that is automatically started and listens to port 3000.
yarn demo
FAQs
AMD Loader with support for combo URL and conditional loading
We found that liferay-amd-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.