
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Unpoly enhances your HTML with attributes to build dynamic UI on the server.
Unpoly works with any language or framework. It plays nice with existing code, and gracefully degrades without JavaScript.
This branch tracks the current major version, Unpoly 3.x.
If you're using Unpoly 2.x, use the 2.x-stable
branch.
If you're using Unpoly 1.x or 0.x, use the 1.x-stable
branch.
To build Unpoly you require Node.js, Webpack and other npm packages.
Install the Node version from .nvmrc
.
To install Webpack and other required npm packages, run:
npm install
The following will build the library and open a web browser with the test suite:
npm run dev
To run individual tasks instead, see below.
Tests don't consume the sources directly, but from a transpiled build in dist/
.
To make fresh build, run:
npm run build-dev
This will build transpiled files such as:
dist/unpoly.js
dist/unpoly.css
dist/unpoly-migrate.js
dist/jasmine.js
dist/specs.js
There is also a task npm run build
for a production build. This does not build files for testing, but also outputs minified versions.
During development it is impractical to make a full build after every change. Instead it is recommend to watch the project:
npm run watch-dev
This will make a fresh build and then watch the project for changes to the source files. When a source changes, affected build files are automatically recompiled. The incremental recompilation is much faster than a full build.
Tests run using a browser-based Jasmine runner.
To start a web server serving the Jasmine runner:
npm run test
This will open a server on http://localhost:4000 and opens that URL with your default browser.
In addition to the unit tests, there is an optional support repo unpoly-manual-tests
. It contains a Rails app to play with Unpoly features that are hard to test well with a unit test. E.g. the visual look of overlays, or edge cases when booting Unpoly.
There is a guided CLI interface to lead you through the release process. To start the process run:
npm run release
FAQs
Progressive enhancement for HTML
The npm package unpoly receives a total of 3,429 weekly downloads. As such, unpoly popularity was classified as popular.
We found that unpoly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.