Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@beyondwords/ghost-helper
Advanced tools
The Ghost Helper aims to make the integration with Ghosts easier by placing the BeyondWords Player in the right place for your theme and by selecting the correct content based on the page URL.
<script async defer src="https://proxy.beyondwords.io/npm/@beyondwords/ghost-helper@latest/dist/umd.js"
onload="new BeyondWords.GhostHelper({
projectId: <ID>
})">
</script>
<script async defer src="https://proxy.beyondwords.io/npm/@beyondwords/ghost-helper@latest/dist/umd.js"
onload="new BeyondWords.GhostHelper({
projectId: <ID>,
target: '.custom-target',
})">
</script>
<script async defer src="https://proxy.beyondwords.io/npm/@beyondwords/ghost-helper@latest/dist/umd.js"
onload="new BeyondWords.GhostHelper({
projectId: <ID>,
assignMarkersEnabled: true,
contentTarget: '.c-content'
})">
</script>
<style>
#beyondwords-player {
margin: 16px 0;
}
</style>
<script async defer src="https://proxy.beyondwords.io/npm/@beyondwords/ghost-helper@latest/dist/umd.js"
onload="new BeyondWords.GhostHelper({
projectId: <ID>
})">
</script>
const helper = new BeyondWords.GhostHelper({
projectId: <ID>
});
await helper.playerLoader;
helper.player.addEventListener("<any>", console.log);
For further customization you can refer to the BeyondWords Player documentation as the arguments of the GhostHelper constructor matches the BeyondWords Player constructor.
To work on the project you must have installed:
Node.js 16 or higher
npm 8 or higher
npm dependencies:
npm install
The build
script will produce artifacts in the /dist
directory, using Vite.
The build artifact is a single js file using the umd format.
npm run build
The lint
script does a full static analysis of the source code, using ESLint.
npm run lint
A new version of the Ghost Helper will be published automatically to NPM using the release Github Actions workflow on each new published Github release.
Copyright (c) 2023 Lstn Ltd (trading as BeyondWords). All rights reserved.
This repository and its contents, including but not limited to source code, documentation, and assets, are the sole property of BeyondWords and are protected by applicable copyright, trademark, and other intellectual property laws.
You are granted permission to use the player embed, SDK and the provided NPM package for your projects. No part of this repository may be otherwise reproduced, distributed, modified, or transmitted in any form or by any means, electronic or mechanical, without the prior written permission of BeyondWords, except for the purpose of submitting pull requests and contributing to the project.
Contributions in the form of pull requests are welcome; however, BeyondWords reserves the right to review, approve, or reject any modifications to the code.
For inquiries and permission requests, please contact support@beyondwords.io.
FAQs
BeyondWords Player integration for Ghost
We found that @beyondwords/ghost-helper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.