
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@capsulajs/capsulahub-widget-canvas
Advanced tools
Widget layout extension, that provides the canvas web-component, where all the other elements can be flexibly situated
Widget layout extension, that provides the canvas web-component, where all the other elements can be flexibly situated.
Prepare the bootstrap of the extension
To install the package from NPM registry you should run
yarn add @capsulajs/capsulahub-widget-canvas
or
npm install @capsulajs/capsulahub-widget-canvas
You can get the default export from the link
https://capsulajs.s3.amazonaws.com/develop/capsulahub-widget-canvas/index.js
{
"components": {
"layouts": {
"capsulahub-root": {
"componentName": "web-canvas",
"path": "https://capsulajs.s3.amazonaws.com/develop/capsulahub-widget-canvas/index.js",
"config": {}
}
},
"items": {}
}
}
Bootstrap function of the extension.
The public API of the extension.
The documentation about public API.
Run
yarn doc
And open doc/index.html in browser.
Internally example prepares the widget almost in the same way as Workspace does it.
yarn start
It will use the local version of extension from local src.
The bundle is being loaded statically in order to provide watch mode.
yarn test
yarn test:debug
New commands have to be typed correctly in typescript.
For example:
Cypress.Commands.add('getHeading', () => {
return cy.get('h1');
});
declare namespace Cypress {
interface Chainable {
getHeading: () => Chainable;
}
}
CapsulaHub and related services are released under MIT Licence.
FAQs
Widget layout extension, that provides the canvas web-component, where all the other elements can be flexibly situated
We found that @capsulajs/capsulahub-widget-canvas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.