Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@domoritz/vega
Advanced tools
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. With Vega you can describe data visualizations in a JSON format, and generate interactive views using either HTML5 Canvas or SVG.
For documentation, tutorials, and examples, see the Vega website. For a description of changes between Vega 2 and later versions, please refer to the Vega Porting Guide.
Use npm or yarn to install Vega for use in third-party libraries or applications.
Using npm:
npm install vega
or using yarn:
yarn add vega
If you would like to install the Vega command line utilities (vg2pdf
, vg2png
, vg2svg
), see the vega-cli
package.
Interested in contributing to Vega? Please see our contribution and development guidelines, subject to our code of conduct.
Looking for support, or interested in sharing examples and tips? Post to the Vega discussion forum or join the Vega slack organization!
Read about future plans in our roadmap.
This package builds the bundled Vega library files and the JSON schema. It also includes a high-level test suite. If performing local development:
yarn build
to build both browser and node.js bundles.yarn test
to run the test suite.FAQs
The Vega visualization grammar.
The npm package @domoritz/vega receives a total of 21 weekly downloads. As such, @domoritz/vega popularity was classified as not popular.
We found that @domoritz/vega demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.