
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@calumk/editorjs-codeflask
Advanced tools
[!WARNING] This repo is depreciated / archived.
[!IMPORTANT] Due to changes in the core editor (Change from codeflask -> codecup) I have decided to fork this repo, and depreciate it.
The Plugin originally relied on CodeFlask, which i have also forked, and republished as CodeCup
As such, the plugin is now different enough, that i have decided to republish it under its new name, so I can accept issues/pull requests on the whole stack, and maintain it better going forwards
Please upgrade to @calumk/editorjs-codecup
npm i @calumk/editorjs-codeflask
https://cdn.jsdelivr.net/npm/@calumk/editorjs-codeflask@latest
This is an EditorJs wrapper for CodeFlask - A lovely lightweight zero-dep code formatter
It was built to be an improvement on :

import EditorJS from '@editorjs/editorjs';
import editorjsCodeflask from '@calumk/editorjs-codeflask';
var editor = EditorJS({
// ...
tools: {
...
code : editorjsCodeflask
},
});
The data imported/exported from the block is as follows:
| Name | Description |
|---|---|
| code | The code that is displayed in the editor, with line breaks |
| language (optional) | The programming language |
| showlinenumbers (optional) | Will show/hide the line numbers (Default true) (WIP - Codeflask #132) |
Since language and linenumbers are optional, existing code blocks can safley use this plugin
FAQs
Codeflask, for EditorJS
The npm package @calumk/editorjs-codeflask receives a total of 405 weekly downloads. As such, @calumk/editorjs-codeflask popularity was classified as not popular.
We found that @calumk/editorjs-codeflask demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.