
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Since of becomming aware of strapi (https://strapi.io/) I wont continue on this project.
Since of becomming aware of strapi (https://strapi.io/) I wont continue on this project.
NSFW-Web (NodeJS Framework - Web) is a build on PrimeReact and implements an automatic connection to the NSFW-API via the NSFW-Connector, which allows the manipulation of defined Databases and Functions.
NSFW-Web is available at npm, if you have an existing application run the following command to download it to your project.
npm install nsfw-web --save
You will also need the public folder for your react app. This public folder includes themes, styles and more stuff of PrimeReact.
An example application is available at github. This example shows the combination of NSFW-API, NSFW-Proxy and NSFW-Web.
//import {ComponentName} from 'nsfw-web';
import {ServerWeb} from 'nsfw-web';
//TODO why is auto import not working :-/
Majority of NSFW-Web components (95%) are from PrimeReact. PrimeReact has almost only native dependecies, there are some exceptions having 3rd party dependencies such as Google Maps for GMap. In addition, components require PrimeIcons for icons and react-transition-group for animations.
"peerDependencies": {
"nsfw-connector": "^1.0.26",
"primereact": "^6.4.1",
"primeicons": "^4.1.0",
"react": "^16.14.0",
"react-dom": "^16.14.0",
"react-router": "^4.3.1",
"react-router-dom": "^4.3.1"
},
"dependencies": {
"chart.js": "^3.3.2",
"csv": "^5.5.0",
"luxon": "^1.27.0",
"quill": "^1.3.7",
"react-transition-group": "^4.4.2",
"webpack-node-externals": "^3.0.0"
}
FAQs
Since of becomming aware of strapi (https://strapi.io/) I wont continue on this project.
The npm package nsfw-web receives a total of 6 weekly downloads. As such, nsfw-web popularity was classified as not popular.
We found that nsfw-web demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.