
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@elementor/wp-media
Advanced tools
This package is an adapter for WordPress' wp.media function. It allows you to open the WordPress media modal, select or upload images from the media library, and get attachment data.
It assumes that the wp.media function is available in the global scope, and will throw otherwise. Therefore, to use this package, make sure to add the media-models handle in the dependencies array of this package.
FAQs
An adapter for WordPress' media utils
The npm package @elementor/wp-media receives a total of 2,991 weekly downloads. As such, @elementor/wp-media popularity was classified as popular.
We found that @elementor/wp-media demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.