Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
shadow-cljs
Advanced tools
2.19.7 - 2022-07-25
084b5
] dep bump: transit-cljs, closure-compiler03506
] add config option to disable namespace reset in watch4ce85
] fix REPL require :reload not actually reloading anythingfcfb2
] css cleanup17dbe
] Polyfill inherits (#1035)7b95c
] entirely remove tailwind and only use shadow.cssde1ee
] port rest of UI css to shadow.css83b77
] more UI css porting838b9
] extract shadow.css to its own project5b91d
] prep for css optimizer, proof of concept appears to work4d51d
] css getting to reasonable statef8f0c
] more cssda675
] more css, begin trials in UI codeda965
] more css stuffd6e14
] add beginnings of shadow.css (from shadow-grove)361e5
] fix lingering goog.global = this || self for ESM buildsa6929
] fix esm build with :devtools {:enabled false}FAQs
ClojureScript compiler and JS bundler
The npm package shadow-cljs receives a total of 34,791 weekly downloads. As such, shadow-cljs popularity was classified as popular.
We found that shadow-cljs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.