Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
vandyke-toolkit
Advanced tools
VanDyke Toolkit is development library for the VanDyke template engine and still under development with a first ALPHA release.
Test cases and more detailed documentation are on the way ...
<element/>
Native self closing HTML element or React component without attributes
<element attribute attributeN/>
Native self closing HTML element or React component with one or more attributes
<element> content </element>
Native HTML element or React component with element body and without attributes
content
can be multiple items of Content
<element attribute attributeN> content </element>
Native self closing HTML element or React component with element body and with one or more attributes
content
can be multiple items of Content
attribute
Simple attribute without given value, value will be interpreted as true
attribute="simple string"
Simple string attribute as known in HTML
attribute=value
Pass an advanced value to this attribute
value
can be an Expression
, Chain
or Helper
Content can be a mix of expressions
, elements
, helpers
and text
. The template whole needs to return a single root element
.
{expression}
Simple expression to provide advanced content
expression
can be Boolean
, Number
, Variable
or String
"foo"
Native JavaScript string with double quotes
1.234
Native Javascript number positive
-1.1234
Native Javascript number negative
true
Native Javascript boolean true
false
Native Javascript boolean false
name
In scope variable access
@name
Contextual variable access (e.g. @index
in each helper)
../name
Parent scope variable access
../../sub.object.name
Path variable access
{#helper/}
Simple helper without any arguments and body
{#helper argument/}
Simple helper with argument
argument
can be an Boolean
, Number
, Variable
or String
In element body:
{#helper} content {/helper}
Block helper containing content
content
can be multiple items of Content
{#helper argument} content {/helper}
Block helper with argument and containing content
argument
can be an Boolean
, Number
, Variable
or String
content
can be multiple items of Content
{#helper argument} content {:else} content {/helper}
Block helper with argument, containing content and alternate content
argument
can be an Boolean
, Number
, Variable
or String
content
can be multiple items of Content
In attribute value:
{#helper} content {/helper}
Block helper containing content
content
can be Boolean
, Chain
, Helper
, Number
, Variable
or String
{#helper argument} content {/helper}
Block helper with argument and containing content
argument
can be an Boolean
, Number
, Variable
or String
content
can be Boolean
, Chain
, Helper
, Number
, Variable
or String
{#helper argument} content {:else} content {/helper}
Block helper with argument, containing content and alternate content
argument
can be an Boolean
, Number
, Variable
or String
content
can be Boolean
, Chain
, Helper
, Number
, Variable
or String
Concat multiple items of Boolean
, Helper
, Number
, Variable
and String
to a single String.
Example: {foo + ' bar ' + bar}
FAQs
Toolkit for the VanDyke template engine
The npm package vandyke-toolkit receives a total of 1 weekly downloads. As such, vandyke-toolkit popularity was classified as not popular.
We found that vandyke-toolkit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.