Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@dotwebstack/webcomponents
Advanced tools
A set of embeddable Linked Data web components, built on React.
The following tools are required:
These webcomponents can be installed using NPM:
npm install --save @dotwebstack/webcomponents @rdfjs/data-model
And of course, also with Yarn:
yarn add @dotwebstack/webcomponents @rdfjs/data-model
Here is an example of using webcomponents within a React application:
import React from 'react';
import { GraphContext, Vocabulary } from '@dotwebstack/webcomponents';
const endpoint = 'https://bag.basisregistraties.overheid.nl/def/bag';
const App = () => (
<GraphContext src={endpoint}>
{(store) => (
<Vocabulary store={store} />
)}
</GraphContext>
);
ReactDOM.render(<App />, document.getElementById('root'));
All components are also available by string reference to the renderComponent
and createComponent
methods.
This makes it possible to use web components in a non-React application:
import { createComponent, renderComponent } from '@dotwebstack/webcomponents';
// Alternative method when not using ES6 modules:
// const namedNode = require('@rdfjs/data-model').namedNode;
// const renderComponent = require('@dotwebstack/webcomponents').renderComponent;
// const createComponent = require('@dotwebstack/webcomponents').renderComponent;
renderComponent(
document.getElementById('root'),
'GraphContext',
{
src: 'https://bag.basisregistraties.overheid.nl/def/bag',
children: (store: any) => createComponent('Vocabulary', { store }),
},
);
See the example folder for more configurations.
Install dependencies:
npm install
Start development server:
npm run start
Make sure to switch to the master
branch first.
Prepare a new version (change update type to minor
or major
when relevant):
npm version patch
Push commit & tag:
git push origin master --tags
To publish the new version to the NPM registry:
npm publish
This project is published under the MIT License.
FAQs
DotWebStack Web Components
The npm package @dotwebstack/webcomponents receives a total of 0 weekly downloads. As such, @dotwebstack/webcomponents popularity was classified as not popular.
We found that @dotwebstack/webcomponents demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.