Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A content manager built with sveltekit, for sveltekit projects. Sensible and extensible, with declarative configuration.
SvelteCMS is an attempt at creating a new kind of Content Management System that builds fast SvelteKit websites with content models from a configurable CMS but doesn't require running a server or subscribing to a content SAAS. SvelteCMS...
You can create a new SvelteCMS project, including the SvelteKit setup, using npm:
> npm create sveltecms@latest
> npm run dev
SvelteCMS works very well with TailwindCSS (and likely with similar utility css frameworks like WindyCSS) for display of elements and ad-hoc styles in content. TailwindCSS can parse classes in the SvelteCMS config file and in locally stored content, but it needs to be told where to look for the files and how to recognize the classes. Luckily SvelteCMS comes with the proper functions already in the tailwind.config.cjs file. However, you still need to install and configure Tailwind and PostCSS:
Install Tailwind (and any plugins):
You can either do this manually or with a svelte-add command, e.g.
npx svelte-add@latest tailwindcss --tailwindcss-typography
Afterward, don't forget to run npm install
!
If you want to use YAML instead of JSON for storing SvelteCMS configuration,
you will want to install and configure @rollup/plugin-yaml
.
Install the plugin:
npm install @rollup/plugin-yaml
Configure Vite to use the plugin in vite.config.js
:
import yaml from '@rollup/plugin-yaml'
...
const config = {
plugins: [
...
yaml(),
]
};
Configure SvelteCMS to use the correct file in src/lib/cms.ts
:
import conf from './sveltecms.config.json'
import conf from './sveltecms.config.yml'
Add type for .yml files in src/app.d.ts
\
declare global {
// other stuff...
module "*.yml" {
const value: any;
export default value;
}
}
You should have a new SvelteKit project with SvelteCMS included
You will find SvelteCMS-specific files in the src/routes/(cms)
folder.
For local development, you can start SvelteKit as you normally would:
npm run dev
What is this? A center for ANTS!? It needs to be at least ... three times bigger!
- Derek Zoolander
SvelteCMS was made to demonstrate and jump-start my vision for what a Content Management System could be in 2023. I want to build fast modern websites with content models from a configurable CMS, but I don't want to run a server or subscribe to a paid SAAS API. Hopefully this helps to move things forward.
Server-side rendering and prerendering work, and it is possible to produce static pages without javascript, but for the pages rendered client-side there is a lot of optimization still to be done. ↩
Requires plugins. ↩
Requires plugins. ↩
Requires plugins and a new bit of API. ↩
Theoretically any serverless host that supports SvelteKit should work with SvelteCMS. ↩
FAQs
A content manager built with sveltekit, for sveltekit projects. Sensible and extensible, with declarative configuration.
The npm package sveltecms receives a total of 1 weekly downloads. As such, sveltecms popularity was classified as not popular.
We found that sveltecms demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.