
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
react-vanilla
Advanced tools
Library for create, and modify DOM elements
Library is implemented in a way similar to jsx h function.
There is a adapter package that use this library as a jsx templates for express library.
There is a cms-tapir package that implements a web server capable of creating REST requests and also use this library as jsx templates h function.
Library is capable of using reactive values.
Properties and children can be defined as functions. If function is presented — it would be called with a callback parameter. When callback parameter is called with some value — parameter would be updated with this value.
Async functions are also supported.
Storage that provide reactive values for DOM part. Tests covered. Read docs of above packages for examples.
Simple XMLHttpRequest wrapper.
GET:
Ajax.get( url, data, callback, config );
Ajax.get( url, callback, config );
await Ajax.async.get(url, data);
POST, DELETE are implemented in the same way.
Extends Math.random with seeded method.
mulberry32 is used as the source of seeded random.
Math.random.seeded.rand([1, 2, 3]) would return one value from the array
Math.random.seeded.setSeed( someString | someNumber) set a new seed
var newSeeded = new Math.random.seeded.constructor() create a uniq seeded random
List of old versions are here: form.dev
FAQs
Library for create, and modify DOM elements
We found that react-vanilla demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.