Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
svelte-hyperscript
Advanced tools
use hyperscript to create svelte components
npm install svelte-hyperscript
CDN: UNPKG | jsDelivr (available as window.svelteHyperscript
)
This package exposes an hyperscript compatible function: h(tag, properties, ...children)
which returns a svelte component.
import h from 'svelte-hyperscript'
import Button from '../src/Button.svelte'
let clicked = 0
const LabeledButton = h(Button, { 'on:click': () => (clicked += 1) }, h('span', null, 'Click Me!'))
const button = new LabeledButton({
target: document.body,
})
This project is the core for svelte-jsx and svelte-htm.
The above example written in jsx using svelte-jsx:
import Button from '../src/Button.svelte'
let clicked = 0
const LabeledButton = (
<Button onClick={() => (clicked += 1)}>
<span>Click Me!</span>
</Button>
)
const button = new LabeledButton({
target: document.body,
})
or using svelte-htm:
import html from 'svelte-htm'
import Button from '../src/Button.svelte'
let clicked = 0
const LabeledButton = html`<${Button} on:click=${() => (clicked += 1)}><span>Click Me!</span><//>`
const button = new LabeledButton({
target: document.body,
})
<slot>
<slot name="name">
<slot let:name={setter}>
but using setter or readable store<slot let:name={property}>{property}</slot>
<Component init={() => setContext()}>...<//>
This project is free and open-source, so if you think this project can help you or anyone else, you may star it on GitHub. Feel free to open an issue if you have any idea, question, or you've found a bug.
Thanks for being willing to contribute!
Working on your first Pull Request? You can learn how from this free series How to Contribute to an Open Source Project on GitHub
We are following the Conventional Commits convention.
npm test
: Run test suitenpm run build
: Generate bundlesnpm run lint
: Lints codesvelte-hyperscript
is open source software licensed as MIT.
FAQs
hyperscript for svelte
We found that svelte-hyperscript demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.