Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
@43081j/shadow-utils
Advanced tools
This package provides a set of useful utilities for dealing with shadow DOM, primarily for test environment situations where one might want to break encapsulation.
querySelector
and querySelectorAll
Behaves in a similar way to the native querySelector
but ignores shadow
DOM boundaries, in that it traverses into shadow roots and continues
searching within them for the given selector.
// find all elements with the class, "foo"
querySelector('.foo');
// find all elements with the class "foo" within a specific node
querySelector('.foo', node);
// pass an options object
querySelector('.foo', node, options);
Both of these functions can take an options object like so:
querySelector('.foo', document, options);
The following options are supported:
{
// If true, enables cross-boundary selector support.
// For example, `.foo .bar` would match even if `.foo` and `.bar` are
// in different shadow roots (but still descendant-like).
"crossBoundary": false
}
getHost
Retrieves the host document or element of a given node.
This behaves similar to calling getRootNode()
manually, but will only
return a result if it is a document or a shadow-root host, meaning
disconnected nodes will return null
.
// get the host of a given node
getHost(node);
FAQs
A set of utilities for dealing with shadow DOM.
The npm package @43081j/shadow-utils receives a total of 3 weekly downloads. As such, @43081j/shadow-utils popularity was classified as not popular.
We found that @43081j/shadow-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.