Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
monaco-languageclient
Advanced tools
Module to connect Monaco editor with language servers.
All changes are noted in the CHANGELOG.
This is npm package is part of the https://github.com/TypeFox/monaco-languageclient mono repo. Please follow the main repositories [instructions]](https://github.com/TypeFox/monaco-languageclient#getting-started) to get started with local development.
Since version 2 (see Important Project Changes) of this library we rely on @codingame/monaco-vscode-api to supply the VSCode API. It evolved substantially since then and thesedays allows to use many vscode only services with monaco-editor
. With v6 and v7 we used a treemended version of monaco-editor
which brought back monaco-editor code that was removed during bundling/threeshaking. This left users with the need to define overrides / resolution which was problematic.
Therefore monaco-vscode-editor-api is now used and installed as an alias to monaco-editor
because it provides the same api as the official monaco-editor, but no longer has the drawbacks of the treemended version.
The bespoke projects not only supplies the api, but it provides 100+ packages with additional services, default extensions and language packs. By default when initalizing monaco-languageclient
via the required initServices
the following services are always loaded:
monaco-languagclient
)monaco-vscode-api
)Please check the following link for information about all services supplied by @codingame/monaco-vscode-api.
If you use the textmate
or theme
services you are able to load textmate based grammars and theme definitions from vscode:
import getThemeServiceOverride from '@codingame/monaco-vscode-theme-service-override';
import getTextmateServiceOverride from '@codingame/monaco-vscode-textmate-service-override';
Once you those services you can no longer make use of monarch based grammars and themes.
For a detailed list of examples please look at this section in the main repository.
FAQs
Monaco Language client implementation
The npm package monaco-languageclient receives a total of 14,864 weekly downloads. As such, monaco-languageclient popularity was classified as popular.
We found that monaco-languageclient demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.