
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@adobe/adobe-client-data-layer
Advanced tools
The Adobe Client Data Layer aims to reduce the effort to instrument websites by providing a standardized method to expose and access any kind of data for any script.
The best way to try out the Adobe Client Data Layer is to install the distributed npm package in your project build, by running:
npm install @adobe/adobe-client-data-layer
Locate the /dist folder in the installed package, which contains the built and minified javascript.
This script can then be included in your page head, as follows:
<script src="adobe-client-data-layer.min.js" async defer></script>
Note - you can directly access the minified version of the data layer without downloading the sources and compiling them.
First run the following commands:
npm install
Then choose from the following npm scripts:
npm run dev - generates the build in the ./dist folder and runs a development server on localhost:3000.npm run build - generates the build in the ./dist folder.npm run test - run the unit testsNote - you can get some stats (bundle size, download time) about the released version.
Release can be triggered only as a Github action. There is no way to release package manually using npm scripts anymore.
To release using Github action:
Release and publish Github action will:
Contributions are welcome! Read the Contributing Guide for more information.
This project is licensed under the Apache V2 License. See LICENSE for more information.
FAQs
Adobe Client Data Layer
The npm package @adobe/adobe-client-data-layer receives a total of 19,612 weekly downloads. As such, @adobe/adobe-client-data-layer popularity was classified as popular.
We found that @adobe/adobe-client-data-layer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 31 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.