
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Unmaintained declarative, asynchronous routing for React.
Navi is an unmaintained JavaScript library for declaratively mapping URLs to asynchronous content.
It comes with:
At it's core, Navi is just a router. You can use it with any React app – just add the navi
and react-navi
packages to your project:
npm install --save navi react-navi
If you'd like a more full featured starter, you can get started with Create React/Navi App:
npx create-react-navi-app my-app
cd my-app
npm start
Or if you want to create a blog, use create-react-blog:
npx create-react-blog react-blog
cd react-blog
npm start
For a full introduction, see the Getting Started guide on the Navi website.
We are grateful to the community for contributing bugfixes, documentation, translations, and any other improvements.
This repository is monorepo that holds the source for Navi and it's related packages, while the Navi website -- which includes Navi's documentation, is part of the navi-website repository.
To contribute code to Navi, you'll need to be able to build it and run the tests. To start, make sure you have lerna 3.x installed globally:
npm install -g lerna
Then fork, clone and bootstrap the repository:
lerna bootstrap
yarn build
yarn test
If you're working on Navi itself, it's often easier to run builds and tests from packages/navi
cd packages/navi
yarn test:watch
The examples are set up to use the copy of Navi at packages/navi/dist
, so they can also be useful for quickly testing changes.
Navi is MIT licensed.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.