
Security News
npm ‘is’ Package Hijacked in Expanding Supply Chain Attack
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.
an easier way for humans to write xml and html
if a line starts with any xaml component ( ~ @ . # $ ) that line represents an xml/http element::
if a line starts with a ":" it is specifying how the following lines should be interpreted::
:css -> cascading style sheets that are inserted with a tag
:python -> python code inserted into a <script type="text/python"> tag (must have a python interpreter running in the browser; e.g. Brython (http://brython.info/index.html))
:javascript -> javascript code inserted into a
if a line starts with // it is a comment, and will be converted into an xml/html comment
if a line starts with a "-" (hyphen) it is a single line of Python code that will be run to help generate the final output
otherwise the line represents the content of an element
xaml components::
~ -> element name
@ -> name attribute
. -> class attribute
$ -> string attribute
e.g. ~document .bold #doc_1 @AutoBiography $My_Biography ->
Based on haml [1] but aimed at Python.
Still in its early stages -- send email to ethan at stoneleaf dot us if you would like to get involved!
Mercurial repository, wiki, and issue tracker at [2].
[1] http://haml.info/ [2] https://bitbucket.org/stoneleaf/xaml
FAQs
XML Abstract Markup Language
We found that xaml demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.
Security News
A critical flaw in the popular npm form-data package could allow HTTP parameter pollution, affecting millions of projects until patched versions are adopted.
Security News
Bun 1.2.19 introduces isolated installs for smoother monorepo workflows, along with performance boosts, new tooling, and key compatibility fixes.