Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
A local database is only required in dev mode if you want to test reading and writing saved REPLs on it. Without a local database in dev mode, the REPL will be able to load saved REPLs from the production database, but not save them.
Note also that in dev mode, the REPL will currently only work in Chrome, as noted in the Vite documentation, pending support in Firefox for import
statements in web workers.
If you do want to use a database, set it up on Supabase with the instructions here and set the corresponding environment variables.
Run the site sub-project:
pnpm install
pnpm dev
and navigate to localhost:5173.
The first time you run the site locally, it will update the list of Contributors and REPL dependencies. After this it won't run again unless you force it by running:
pnpm update
By default, the REPL will fetch the most recent version of Svelte from https://unpkg.com/svelte. When running the site locally, you can also use your local copy of Svelte.
To produce the proper browser-compatible UMD build of the compiler, you will need to run npm run build
(or npm run dev
) in the svelte
repository with the PUBLISH
environment variable set to any non-empty string:
git clone https://github.com/sveltejs/svelte.git
cd svelte
npm ci
PUBLISH=1 npm run build
The default configuration assumes that the sites
repository and the svelte
repository are in the same directory. If not, you can set LOCAL_SVELTE_PATH
in sites/svelte.dev/.env
to a different path to the local copy of Svelte.
Then visit the REPL at localhost:5173/repl?version=local. Please note that the local REPL only works with pnpm dev
and not when building the site for production usage.
In order for the REPL's GitHub integration to work properly when running locally, you will need to:
Authorization callback URL
to http://localhost:5173/auth/callback
;Application name
as you like, and Homepage URL
as http://localhost:5173/
;Client ID
and Client Secret
.env.local
file (see .env.example
) containing:
GITHUB_CLIENT_ID=[your app's Client ID]
GITHUB_CLIENT_SECRET=[your app's Client Secret]
The GitHub app requires a specific callback URL, and so cannot be used with the preview deployment in the staging environment.
To build the website, run pnpm build
. The output can be found in build
.
Tests can be run using pnpm test
.
Anchors are automatically generated using headings in the documentation and by default (for the english language) they are latinised to make sure the URL is always conforming to RFC3986.
If we need to translate the API documentation to a language using unicode chars, we can setup this app to export the correct anchors by setting up SLUG_PRESERVE_UNICODE
to true
in config.js
.
FAQs
Docs and examples for Svelte
The npm package svelte.dev receives a total of 0 weekly downloads. As such, svelte.dev popularity was classified as not popular.
We found that svelte.dev demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.