
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
wx-svelte-core
Advanced tools
SVAR Svelte Core library, a collection of form controls and UI components
SVAR Core library offers a set of 20+ ready-made Svelte UI components: form controls, popups, date and time picker, toast notifications, and more. All components are lightweight, responsive, fast-performing, and available in light and dark skins.
In addition to the Core library, you can use the following SVAR components to build unified app UIs:
There are two versions of the library: the 1.x version, designed to work with Svelte 4, and the 2.x version, created for Svelte 5. Please note that the 2.x version is in beta and may contain some instabilities.
To use the SVAR Core beta for Svelte 5, install it as follows:
npm install wx-svelte-core
To use the SVAR Core for Svelte 4:
npm install wx-svelte-core@1.3.0
To use any of the Core components, simply import the package and include the desired component in your Svelte file:
<script>
import { Button } from "wx-svelte-core";
</script>
<Button>Click me</Button>
See the getting started guide to quickly set up and begin using SVAR Core components in your Svelte projects.
Typically, you don't need to modify the code. However, if you wish to do so, follow these steps:
yarn
to install dependencies. Note that this project is a monorepo using yarn
workspaces, so npm will not workyarn start
To run the test:
yarn start:tests
yarn test:cypress
Join our community forum to get help or submit feature requests.
FAQs
SVAR Svelte Core - Svelte UI library of 20+ components and form controls
We found that wx-svelte-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.