Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@byojs/modal
Advanced tools
Modal ... // TODO
// TODO
The main purpose of Modal is...
npm install @byojs/modal
The @byojs/modal npm package includes a dist/
directory with all files you need to deploy Modal (and its dependencies) into your application/project.
Note: If you obtain this library via git instead of npm, you'll need to build dist/
manually before deployment.
If you are using a bundler (Astro, Vite, Webpack, etc) for your web application, you should not need to manually copy any files from dist/
.
Just import
the adapter(s) of your choice, like so:
import { /* TODO */ } from "@byojs/modal";
The bundler tool should pick up and find whatever files (and dependencies) are needed.
If you are not using a bundler (Astro, Vite, Webpack, etc) for your web application, and just deploying the contents of dist/
as-is without changes (e.g., to /path/to/js-assets/modal/
), you'll need an Import Map in your app's HTML:
<script type="importmap">
{
"imports": {
"modal": "/path/to/js-assets/modal/modal.mjs"
}
}
</script>
Now, you'll be able to import
the library in your app in a friendly/readable way:
import { /* TODO */ } from "modal";
Note: If you omit the above modal import-map entry, you can still import
Modal by specifying the proper full path to the modal.mjs
file.
The API provided by Modal...
// .. TODO
// TODO
dist/*
If you need to rebuild the dist/*
files for any reason, run:
# only needed one time
npm install
npm run build:all
This library only works in a browser, so its test suite must also be run in a browser.
Visit https://byojs.dev/modal/
and click the "run tests" button.
To instead run the tests locally, first make sure you've already run the build, then:
npm test
This will start a static file webserver (no server logic), serving the interactive test page from http://localhost:8080/
; visit this page in your browser and click the "run tests" button.
By default, the test/test.js
file imports the code from the src/*
directly. However, to test against the dist/*
files (as included in the npm package), you can modify test/test.js
, updating the /src
in its import
statements to /dist
(see the import-map in test/index.html
for more details).
All code and documentation are (c) 2024 Kyle Simpson and released under the MIT License. A copy of the MIT License is also included.
FAQs
Simple wrapper around SweetAlert2
The npm package @byojs/modal receives a total of 0 weekly downloads. As such, @byojs/modal popularity was classified as not popular.
We found that @byojs/modal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.