Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A lightweight and powerful JavaScript MVVM library for building web UI component.
A lightweight and powerful JavaScript MVVM library for building web UI component.
Simple api and without any dependence. Consists of two independent libraries:
sugar.js
Component system + MVVM , for building flexible web component.mvvm.js
Achived above MVVM , it doesn't rely on sugar, it can be used independently.<html>
<body>
<div id="app">
<h1>{{ title }}</h1>
</div>
</body>
</html>
// define HelloWorld component:
var HelloWorld = Sugar.Component.extend({
init: function (config) {
this.Super('init', config, {
target: '#app',
model: {
title: 'Hello world!'
}
});
}
});
// create component instance:
var app = Sugar.core.create('hello-world', HelloWord);
And then the HTML structure was rendered/parsed to be:
<html>
<body>
<div class="app">
<h1>Hello world!</h1>
</div>
</body>
</html>
Data reactive (Model Drive View):
app.vm.$data.title = 'Change the title!'; // <h1>Change the title!</h1>
More MVVM directives are supported, see all at documentation.
There are several complete and amusing demos in demos/
folder make you know more about sugar.js
, check it out and preview them in the following links:
i. Sometimes Github-page link disconnected by
Enforce HTTPS
, please usehttps
protocol instead.
ii. Some demos need httpSever (Ajax), so run script
npm run server
to preview them if in your local.
You can also experience sugar.js
online with a RadioComponent at jsfiddle.
Get by NodeJS package: npm install sugar-js --save
Both support UMD
(Universal Module Definition)
mvvm.js (just 28 kb)
https://tangbc.github.io/sugar/dist/mvvm.min.jssugar.js (just 35 kb)
https://tangbc.github.io/sugar/dist/sugar.min.jsBrowsers: Not support IE8 and below. Besides, support most modern desktop and mobile browsers.
Get start and check documentation on Wiki.
build/
Development, production and test configurations.
demos/
Several complete examples/demos developed by sugar.js
.
dist/
Product files of sugar.js
and mvvm.js
, and their compressed.
src/
Source code module files:
test/
Unit test specs writing by karma + jasmine.
Welcome any pull request of fixbug or improvement, even only supplement some unit test specs.
Fork and clone repository to your local.
Install NodeJS package devtools: npm install
.
Develop and debug: npm run dev
(generate sourcemap files in bundle/
).
Add and write test spec, (in test/units/specs/
) then run uint test:npm run test
.
Generate the test coverage report and jshint checking up: npm run build
.
FAQs
A lightweight and powerful JavaScript MVVM library for building web UI component.
We found that sugar-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.