
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@committed/annotation-viewer
Advanced tools
Annotation Viewer
yarn add @committed/annotation-viewer @committed/components @material-ui/core
Peer dependencies
yarn add @committed/components @material-ui/core
import React from 'react'
import { AnnotationViewer } from '@committed/annotation-viewer'
class Example extends React.Component {
render() {
return (
<AnnotationViewer
text="The British people are represented by members of Parliament"
marks={[
{
offset: 4,
length: 7,
type: 'NORP',
},
{
offset: 49,
length: 10,
type: 'ORG',
},
]}
inlines={[
{
offset: 4,
length: 55,
type: 'Link',
},
]}
/>
)
}
}
NB The committed component
ThemeProvider
must be in the react component stack. (Future versions may remove these pees dependencies.)
Further examples of use and configuration options can be seen in the storybook.
The main build is currently performed using Rollup and yarn build
.
We use storybook to develop and document the components, this is run in development using
yarn storybook
and to create a production version
yarn build-storybook
To run the example:
yarn
yarn build
cd example
yarn
yarn start
MIT - © Committed Software 2020 https://committed.io
FAQs
Annotation Viewer
The npm package @committed/annotation-viewer receives a total of 1 weekly downloads. As such, @committed/annotation-viewer popularity was classified as not popular.
We found that @committed/annotation-viewer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.