
Security News
/Research
npm Phishing Email Targets Developers with Typosquatted Domain
A phishing attack targeted developers using a typosquatted npm domain (npnjs.com) to steal credentials via fake login pages - watch out for similar scams.
svelte-dev-helper
Advanced tools
Helper for svelte components to ease development. Used under the hood by svelte-loader.
This is meant to be used under the hood for creating a build toolchain, or a dev helper based on Svelte components.
import {Registry, configure, createProxy} from 'svelte-dev-helper';
import Component from './Component.html'; //some svelte component
configure(configOptions);
const id = someUniqueID();
Registry.set(id, {
rollback: null,
component: Component,
instances:[]
});
export createProxy(id);
The component returned by createProxy
now has the following features:
<!--<Component>-->
comment marker in the DOM just above where the component's DOM starts$0.__component__
in devtools after higlighting the comment marker from above.Registry.get(id).instances
_rerender
methodcomponent
in the registry (using Registry.set(id, Registry.get(id).component = newComponent)
) all future renders of the component will use the newly switched component._rerender
on them.rollback
property in any Registry
item can be used to hold the last good version of a component. If there is an error instantiating a switched component, it will try to use the component version stored in rollback
The Registry
is also available at window.__SVELTE_REGISTRY__
v1.1.9
FAQs
Helper for svelte components to ease development
The npm package svelte-dev-helper receives a total of 41,710 weekly downloads. As such, svelte-dev-helper popularity was classified as popular.
We found that svelte-dev-helper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
A phishing attack targeted developers using a typosquatted npm domain (npnjs.com) to steal credentials via fake login pages - watch out for similar scams.
Security News
Knip hits 500 releases with v5.62.0, refining TypeScript config detection and updating plugins as monthly npm downloads approach 12M.
Security News
The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.