Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Spck UI is a lightweight (just 37.1kB gzipped), simple, declarative UI library eliminating the need for using HTML, CSS for creating SPAs (Single Page Applications).
Spck UI is purely the View part of MVC, and works using vanilla JavaScript, jQuery, and the popular components library UIkit.
Spck UI takes the approach of using simple JavaScript objects instead of HTML as it is more flexible, integrates better with code and eliminates the need of using JSX or other templating markup.
Spck UI is based on the existing popular UIkit library for many UI components as well as CSS styling. Although the code can be modified to support other similar libraries.
Spck UI can be installed using bower:
bower install spck-ui
To add styling, add this tag to your HTML file:
<link rel="stylesheet" href="spck-ui.css">
To use include the icon files, also add:
<link rel="stylesheet" href="spck-ui-icons.css">
Credit for the icons goes to the UIkit 3 library.
Add the following script files:
<script src="jquery.js" type="text/javascript"></script>
<script src="spck-ui.js" type="text/javascript"></script>
API Documentation available here.
Let me know about your projects using Spck UI!
This library is extremely lightweight for an all batteries-included library (except jQuery).
Name | Size |
---|---|
Ember 2.2.0 | 111K |
Ember 1.13.8 | 123K |
Angular 2 | 111K |
Angular 2 + Rx | 143K |
Angular 1.4.5 | 51K |
React 0.14.5 + React DOM | 40K |
React 0.14.5 + React DOM + Redux | 42K |
React 15.3.0 + React DOM | 43K |
React 16.2.0 + React DOM | 31.8K |
Vue 2.4.2 | 20.9K |
Inferno 1.2.2 | 20K |
Aurelia 1.0.2 | 63K |
Name | Size |
---|---|
React-Bootstrap 0.32.4 | 42.4K |
Antd 3.23.3 | 533K |
Semantic UI 2.4.1 | 71.2K |
Semantic UI React 0.88.1 | 84.6K |
Bulma 0.7.5 | 25.8K |
Quasar 0.17.20 | 95.2K |
UIkit 3.2.0 | 42.5K |
Latest ✔ | Latest ✔ | 11+ ✔ | 9.0+ ✔ | Latest ✔ |
FAQs
Declarative enterprise UI components library.
The npm package spck-ui receives a total of 1 weekly downloads. As such, spck-ui popularity was classified as not popular.
We found that spck-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.