
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
4d-gantt-chart
Advanced tools
This package has started as an idea to create Gantt Chart suited for the construction industry. The inital code was inspired by the blog of Artem aka @shybovycha. The project is open source and can be found here.
This library is developed to fill a gap in the opensource community for tools that could deal with schedules in construction in general. The main focus of the library is the ability to play animation using the timeline so it could integrate with other tools like BIM and libraries like ifc.js and three.js.
This library is part of a suite of libraries developed primairly for planners and project controllers like the PyP6XER library that can be used to read and write P6 XER files.
The package is developed using TypeScript and it is still work in progress.
The plan for the package is to be published on npmjs.com. However, it is not ready yet. The package can be installed using the following command:
npm install 4d-gantt
You can see a live demo of the project here.
[
{id: 1, name:"Task 1", start: new Date("2022/1/1"), end: new Date("2022/3/1"), parent: null},
{id: 2, name:"Task 2", start: new Date("2022/2/1"), end: new Date("2022/3/1"), parent: 1}
]
FAQs
4D Gantt Chart Example
The npm package 4d-gantt-chart receives a total of 13 weekly downloads. As such, 4d-gantt-chart popularity was classified as not popular.
We found that 4d-gantt-chart demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.