Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
c3 is a D3-based reusable chart library that enables deeper integration of charts into web applications.
Follow the link for more information: http://c3js.org
Additional samples can be found in this repository:
You can run these samples as:
$ cd c3/htdocs
$ python -m SimpleHTTPServer 8080
For general C3.js-related discussion, please visit our Google Group at https://groups.google.com/forum/#!forum/c3js.
The issue queue is to be used for reporting defects and problems with C3.js, in addition to feature requests and ideas. It is not a catch-all support forum. For general support enquiries, please use the Google Group at https://groups.google.com/forum/#!forum/c3js. All questions involving the interplay between C3.js and any other library (such as AngularJS) should be posted there first!
Before reporting an issue, please do the following:
Search for existing issues to ensure you're not posting a duplicate.
Search the Google Group to ensure it hasn't been addressed there already.
Create a JSFiddle or Plunkr highlighting the issue. Please don't include any unnecessary dependencies so we can isolate that the issue is in fact with C3. Please be advised that custom CSS can modify C3.js output!
When posting the issue, please use a descriptive title and include the version of C3 (or, if cloning from Git, the commit hash — C3 is under active development and the master branch contains the latest dev commits!), along with any platform/browser/OS information that may be relevant.
Pull requests are welcome, though please post an issue first to see whether such a change is desirable. If you choose to submit a pull request, please do not bump the version number unless asked to, and please include test cases for any new features!
Please fork this fiddle:
<=3.5.0
MIT
FAQs
D3-based reusable chart library
We found that @andyet/c3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.