Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@eisberg-labs/next-image-section
Advanced tools
Image as background, React section with lazy loaded nextjs image as background and tailwind compatible
React Section with lazy loaded nextjs image as background and tailwind, server component compatible. Img tag can be used as a background, it's usable for SEO, due to lazy loading and use of alt tags (speed and semantics).
If you 👍 or use this project, consider giving it a ★, thanks! 🙌
Package uses Nextjs Image component, so having next.js installed is required. Don't forget to add allowed domains in next.config.js.
Component is compatible with server only components.
npm i --save @eisberg-labs/next-image-section
Import style.css in your global css file or directly in the component:
import ImageSection from '@eisberg-labs/next-image-section';
import '@eisberg-labs/next-image-section/style.css';
<ImageSection
src={"https://pixabay.com/images/id-2748776"}
alt={"Pixabay Milna Croatia photo and picture by k9arteu"}
childClassName={"container bg-white"}
>
<p className={"text-xl"}>You can see in this example that img tag can work as a background.</p>
</ImageSection>
MIT © Eisberg Labs
FAQs
Image as background, React section with lazy loaded nextjs image as background and tailwind compatible
The npm package @eisberg-labs/next-image-section receives a total of 0 weekly downloads. As such, @eisberg-labs/next-image-section popularity was classified as not popular.
We found that @eisberg-labs/next-image-section demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.