
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
slate-vue3
Advanced tools
slate-react library implemented with vue3
vue3 for high-performance rendering, and later connect to vapor modenpm install slate-vue3
<script setup lang="ts">
import { Slate, Editable, } from "slate-vue3";
import { createEditor } from "slate-vue3/core";
import { withDOM } from "slate-vue3/dom";
import { withHistory } from "slate-vue3/history";
const initialValue = [
{
type: "paragraph",
children: [{ text: "Let's start" }],
},
];
const editor = withHistory(withDOM(createEditor()));
editor.children = initialValue;
</script>
<template>
<Slate :editor>
<Editable />
</Slate>
</template>
To get a sense for how you might use Slate, check out a few of the examples:
If you have an idea for an example that shows a common use case, pull request it!
This document serves only as a supplement to the slate document and mainly provides case studies and differences between slate-vue3 and slate-react
If you're using slate for the first time, check out the Getting Started walkthroughs and the Concepts to familiarize yourself with slate's architecture and mental models.
Due to the complexity of maintaining multiple packages and the lack of reusability of sub packages in other frameworks, slate-vue3 does not use workspace and only performs sub packaging during packaging
| Package | Version | Description |
|---|---|---|
slate-vue3/core | slate's core data model logic. | |
slate-vue3/dom | DOM implementation of slate | |
slate-vue3/history | a plugin that adds undo/redo history to slate. | |
slate-vue3/hyperscript | a hyperscript tool to write JSX slate documents! | |
slate-vue3/yjs | integration of slate-yjs |
Welcome to provide suggestions on the issue, it would be even better if PR could be mentioned along with it
slate-vue3 is MIT-licensed.
FAQs
slate-react library implemented with vue3
The npm package slate-vue3 receives a total of 420 weekly downloads. As such, slate-vue3 popularity was classified as not popular.
We found that slate-vue3 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.