
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
:warning: In the future, the
sennanpm package will be deprecated. Development continues in theliferay/liferay-portalrepo (more specifically, inside thefrontend-js-spa-webmodule), but not as an independent project, in order to better integrate with and serve the needs of Liferay DXP. At the time of writing, the last official release of the npm packages was v2.7.9, from the2.xseries on themasterbranch, and it is still used by a number of pre-EOL versions of Liferay DXP, such as 7.0.x, 7.1.x, 7.2.x, and 7.3.x. Any future maintenance releases of thesennanpm package will be produced from this repo, and the old repo at liferay/senna.js will be archived (marked as read-only).
Senna.js is a blazing-fast single page application engine that provides several low-level APIs that allows you to build modern web-based applications with only ~15 KB of JavaScript without any dependency.
Senna.js is widely used and well maintained internally at Liferay but does not currently have staffing to support the open source release. As such this project is mostly internal and support is minimal. For certain issues, like build integration we are in an especially bad position to offer support.
To get assistance you can use any of the following forums
We will try our best, but keep in mind that given our support staffing, we may not be able to help.
Install via npm, Bower, CDN or download as a zip:
npm install senna
Install NodeJS >= v0.12.0, if you don't have it yet.
Install global dependencies:
[sudo] npm install -g gulp
npm install
bower install
gulp
gulp server
gulp test
gulp test:coverage
Please, see our detailed CONTRIBUTING guide for all the information you need to contribute to the project!
For detailed changelog, check Releases.
Senna.js was made with love by these people and a bunch of awesome contributors.
| Author | Maintainer |
|---|---|
| Eduardo Lundgren | Bruno Basto |
BSD License © Liferay, Inc.
FAQs
A blazing-fast Single Page Application engine
The npm package senna receives a total of 2,928 weekly downloads. As such, senna popularity was classified as popular.
We found that senna demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 21 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.