Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@financial-times/n-tracking
Advanced tools
This package provides client-side tracking initialisation for FT.com. It configures o-tracking (which is used to capture and send tracking events to Spoor) with the provided and automatically inferred context data.
This package is for client-side use and is distributed on npm.
npm install -S @financial-times/n-tracking
After installing the package you can import the tracking component into your client-side code:
import * as tracking from '@financial-times/n-tracking';
const oTracking = tracking.init(options);
To initialise the component you'll need to provide it with several configuration options.
init(options)
Configures o-tracking with the given options, triggers a page view event, initialises click tracking, and returns the instance of o-tracking.
broadcast(name, data)
Creates a CustomEvent
with the given name and data and dispatches it from the document <body>
element. It is intended to be used to trigger oTracking.event
events.
trackers.customTrackerName()
TODO: custom tracking events to be used across FT.com
Property | Type | Required | Description |
---|---|---|---|
appContext | Object | Yes | FT.com App Context data describing the current page which will be appended to all captured events. |
extraContext | Object | No | Additional data describing the current page which will be appended to all captured events. |
pageViewContext | Object | No | Additional data to append to the page view event but not |
FAQs
Client-side tracking initialisation for FT.com apps
The npm package @financial-times/n-tracking receives a total of 450 weekly downloads. As such, @financial-times/n-tracking popularity was classified as not popular.
We found that @financial-times/n-tracking demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.