
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
A component file routing system
This library allows to fetch the files for usable components in the kaleo framework using the kaleo configs and url queries to determine the files to fetch based on environments and can be used both for the frontend and the backend
This libray can be installed using:
The script can be loaded both in the head and in the body.
Browser
<script src="/(node_modules|bower_modules)/solone/solone.min.js"></script>
Node
var solone = require('solone');
To use the library is determined whether you are using it for Node or for the frontend
Express (Node)
var solone = require('solone');
var express = require('express')();
express.use(solone);
Connect (Node)
var solone = require('solone');
var connect = require('connect')();
connect.use(testServer);
Native (Node)
var solone = require('solone');
var http = require('http');
http.createServer(function(req, res){
return solone(req,res,function(){});
});
The browser requires an init to properly fetch required files that it uses
Browser
solone.init(function(){
solone('component')
.then(console.log) // logs component function
.catch(console.error) // in case the component does not exist
})
Setting the allowable environments and the current environment help you to seperate out which component versions to fetch
Altering class config
solone.config().env = 'qa';
Using local config.js
module exports = {
environments: ['qa'],
env: 'qa'
}
Using the header query
/component?env=qa
Routing comes in two forms, a NodeJS backend based routing and a frontend based routing. By default frontend based routing will be on. To turn on backend routing do the following
NodeJS *express/connect
httpserver.use(require('solone'));
Frontend
solone.backendRouting(true);
You can also change the directory where your app exists by using the base and prefix settings. this can be changed either through the library methods or in your config file. What this does is set the beginning of the url that will be used when fetching your local config, auth, and component files.
Config
module.exports = {
prefix: '/app',
base: '/src'
}
Library
solone.base('/src')
.prefix('/app');
Authentication allows for using authorization to allow the fetching of any component. In this way you can block the use of some components without proper authentication. Authentication is done in the following files
NodeJS
auth-server.js
Frontend
auth-client.js
The authentication method recieves the following:
Example: (only allow prod environment)
function (info, resolve, reject){
if(info.query.env === 'prod') return resolve();
reject();
}
A on authorization failed event can also be added for extra functionality
solone.setAuthFailListener(function(component, query){
console.error('You are not an authorized user for this component!', component);
})
If You would like to contribute here are the steps
npm run buildnpm testYou can view the license here: License
FAQs
A component file routing system
We found that solone demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.