Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@e3c-summer-worker/homepage-ticker
Advanced tools
Ticker for the home page, writen in Elm and directed by Rev. Doo.
Ticker for the home page, writen in Elm and directed by Rev. Doo.
What it does is fetch the data from the deta micro server and display it in a simple HTML element.
It uses a Deta Micro server for the HTTP endpoint, which is a free cloud service built on AWS. The data is located in a Google Spreadsheet at this link. The code handling this logic resides in this repository.
On the Deta web view, the project is under sheets-api
. Note that the project is not homepage-ticker
, that was an old one that should be deleted, but Deta doesn't allow project deletions yet!
yarn
yarn start
This will watch the files in src/
and rebuild build/ticker.js
whenever they change.
Open a local dev server to host the html in the public/
folder to see the result. I use Five Server to do this. NOTE: make sure the url ends in public/index.html
, otherwise the server will not serve the files correctly.
yarn build
The live server can also be used to test that the compiled code is working.
The distributed files will be in the build/
folder (ticker.js
and ticker.css
).
V2 used webpack; it essentially contains the stuff in v1's <script>
tag, so you just need to import the files.
<link rel="stylesheet" type="text/css"
href="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@2/build/ticker.css">
<script
src="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@2/build/ticker.js"></script>
<script>
Latest version is 1.1.1. See the commit: https://github.com/e3c-summer-worker/custom-header/blob/1d8bfdd976f4aecd5c0d905d82b3d3a3184f3956/homepage-ticker-test.html.
Note that that commit used @latest
, but I soon realized I should have used @1
.
<link rel="stylesheet" type="text/css"
href="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@1/build/ticker.css">
<script
src="https://cdn.jsdelivr.net/npm/@e3c-summer-worker/homepage-ticker@1/build/homepage-ticker-elm.js"></script>
<script>
window.addEventListener('load', () => {
console.log('query selector:', document.querySelector('.sqs-slide-layer.layer-front.full-width-height > .sqs-slide-layer-content'));
// somehow using `document.querySelector('.sqs-slice-group.group-copy.align-center-vert.full-width')` doesn't work
const parent = document.querySelector('.sqs-slide-layer.layer-front.full-width-height > .sqs-slide-layer-content');
const child = parent.children[1];
const elm = document.createElement('div');
elm.setAttribute('id', 'elm');
// insert after wrapper
// https://stackoverflow.com/a/4793630
parent.insertBefore(elm, child);
Elm.HomepageTicker.init({ node: elm });
})
</script>
FAQs
Ticker for the home page, writen in Elm and directed by Rev. Doo.
We found that @e3c-summer-worker/homepage-ticker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.