
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@dodona/trace-component
Advanced tools
- [Trace component](#trace-component) - [Usage](#usage) - [CSS variables](#css-variables) - [Contributing](#contributing) - [Setup](#setup) - [Build](#build) - [Dev Server](#dev-server)
Trace component is a modern webcomponent that visualizes the trace of a program. It is reimplementation of pythontutor. All credits for the original idea go to Philip Guo.
To use the webcomponent, import the js and simply use the component in your html:
<tc-trace .trace=${trace}></tc-trace>
This trace is preferably generated by our json tracer. But you can write your own trace generator as long as it follows the format specified in our types. This component should also be compatible with the pythontutor trace format for now, but this might change in the future.
You can listen to frame-change
events to get the current frame of the trace for example to indicate the current line of code.
To adjust the look of the trace, you can use the following css variables:
--tc-surface-color
--tc-on-surface-color
--tc-muted-color
--tc-divider-color
--tc-primary-color
--tc-primary-container-color
--tc-on-primary-color
--tc-on-primary-container-color
--tc-secondary-color
--tc-secondary-container-color
--tc-on-secondary-color
--tc-on-secondary-container-color
More specific css variables can be found in the styles file.
Install dependencies:
yarn install
To build the JavaScript version of your component:
yarn build
To watch files and rebuild when the files are modified, run the following command in a separate shell:
yarn build:watch
This project uses modern-web.dev's @web/dev-server for previewing the project without additional build steps. Web Dev Server handles resolving Node-style "bare" import specifiers, which aren't supported in browsers. It also automatically transpiles JavaScript and adds polyfills to support older browsers. See modern-web.dev's Web Dev Server documentation for more information.
To run the dev server and open the project in a new browser tab:
yarn serve
There is a development HTML file located at /dev/index.html
that you can view at http://localhost:8000/dev/index.html. Note that this command will serve your code using Lit's development mode (with more verbose errors). To serve your code against Lit's production mode, use yarn serve:prod
.
FAQs
- [Trace component](#trace-component) - [Usage](#usage) - [CSS variables](#css-variables) - [Contributing](#contributing) - [Setup](#setup) - [Build](#build) - [Dev Server](#dev-server)
The npm package @dodona/trace-component receives a total of 148 weekly downloads. As such, @dodona/trace-component popularity was classified as not popular.
We found that @dodona/trace-component demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.