Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
svelte-hyperscript
Advanced tools
use hyperscript to create svelte components
This package exposes an hyperscript compatible function: h(tag, properties, ...children)
which returns a svelte component.
This is the core for svelte-jsx and [svelte-htm]. These packages allow to simplify svelte testing code especially slot handling.
npm install svelte-hyperscript
And then import it:
// using es modules
import h from 'svelte-hyperscript'
// common.js
const h = require('svelte-hyperscript')
Alternatively use UNPKG or jsDelivr packages:
With script tags and globals:
<!-- UNPKG -->
<script src="https://unpkg.com/svelte-hyperscript"></script>
<!-- jsDelivr -->
<script src="https://cdn.jsdelivr.net/npm/svelte-hyperscript"></script>
<script>
<!-- And then grab it off the global like so: -->
const h = svelteHyperscript
</script>
Hotlinking from unpkg: (no build tool needed!)
import h from 'https://unpkg.com/svelte-hyperscript?module'
import h from 'svelte-hyperscript'
import Button from '../src/Button.svelte'
let clicked = 0
const LabeledButton = h(Button, { 'on:click': () => (clicked += 1) }, h('span', null, 'Click Me!'))
const button = new LabeledButton({
target: document.body,
})
The above example written in jsx using svelte-jsx:
import Button from '../src/Button.svelte'
let clicked = 0
const LabeledButton = (
<Button onClick={() => (clicked += 1)}>
<span>Click Me!</span>
</Button>
)
const button = new LabeledButton({
target: document.body,
})
or using [svelte-htm]:
import html from 'svelte-htm'
import Button from '../src/Button.svelte'
let clicked = 0
const LabeledButton = html`<${Button} on:click=${() => (clicked += 1)}><span>Click Me!</span><//>`
const button = new LabeledButton({
target: document.body,
})
We aim to support all svelte features. In some cases this is not possible due to the static nature of hyperscript. For those cases we provided feasible workarounds:
To allow reactivity the following properties accept a writable store:
<slot let:name={value}> additionally accepts a function which is called with the current value.
This allows to for example to access the value if an input:
import { test } from '@jest/globals'
import { render } from '@testing-library/svelte'
import userEvent from '@testing-library/user-event'
import { writable, get } from 'svelte/store'
import h from 'svelte-hyperscript'
test('write into an input', () => {
const text = writable()
const { getByRole } = render(h('input', { 'bind:value': text }))
const input = getByRole('textbox')
await userEvent.type(input, 'some text')
expect(get(text)).toBe('some text')
})
The tests are a good source of how to use this feature.
The action feature of svelte is supported but lacks the possibility to pass parameters to the action. This can still be achieved using a factory function as action:
import h from 'svelte-hyperscript'
import action from 'some-action-module'
h('div', { 'use:action': (node) => action(node, parameters) })
<slot>
<slot name="name">
<slot let:name={setter}>
but using setter or writable store<slot let:name={property}>{property}</slot>
when using a writable storeThis project is free and open-source, so if you think this project can help you or anyone else, you may star it on GitHub. Feel free to open an issue if you have any idea, question, or you've found a bug.
Thanks for being willing to contribute!
Working on your first Pull Request? You can learn how from this free series How to Contribute to an Open Source Project on GitHub
We are following the Conventional Commits convention.
npm test
: Run test suitenpm run build
: Generate bundlesnpm run lint
: Lints codesvelte-hyperscript
is open source software licensed as MIT.
FAQs
hyperscript for svelte
The npm package svelte-hyperscript receives a total of 1,460 weekly downloads. As such, svelte-hyperscript popularity was classified as popular.
We found that svelte-hyperscript demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.