Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@flowaccount/scully-plugin-lazy-load-picture-tag
Advanced tools
I wrote this as an :paperclip: `angular-paperclip` :paperclip: experiment from the talk by **Misko Hevery (@mhevery)** from the [Keynote in NGCONF 2019](https://nitayneeman.com/posts/all-talks-from-ng-conf-2019/#keynote-1)
I wrote this as an :paperclip: angular-paperclip
:paperclip: experiment from the talk by Misko Hevery (@mhevery) from the Keynote in NGCONF 2019
It is a lazy effort to lazy load images that lies int the <picture>
tags. I am not sure why, since the srcset
probably does that for you, but lighthouse
stills complains about it. And instead of replacing all the possible tags in the code, I chose to lazy-load it using the adaptation for lazyload
package that does the img
tag instead.
You can specify the placeholder image when lazyloading the img, which is a nice touch for mobile slow 3g/4g :smile:
Read more about the experiment at this article --> Angular Paperclip Experiment
To install this library with npm
run
npm install scully-plugin-lazy-load-picture-tag --save-dev
or with yarn
yarn add scully-plugin-lazy-load-picture-tag --dev
scully.config.ts
fileimport { getLazyLoadPictureTagPlugin } from '@flowaccount/scully-plugin-lazy-load-picture-tag';
const postRenderers = [getLazyLoadPictureTagPlugin({
imagePlaceholder: 'https://flowaccountcdn.com/new_landing/image/White_2px.jpg'
})];
export const config: ScullyConfig = {
routes: {},
defaultPostRenderers: postRenderers,
}
yarn scully
This is an adaptation from scully-plugin-disable-angular
FAQs
I wrote this as an :paperclip: `angular-paperclip` :paperclip: experiment from the talk by **Misko Hevery (@mhevery)** from the [Keynote in NGCONF 2019](https://nitayneeman.com/posts/all-talks-from-ng-conf-2019/#keynote-1)
The npm package @flowaccount/scully-plugin-lazy-load-picture-tag receives a total of 27 weekly downloads. As such, @flowaccount/scully-plugin-lazy-load-picture-tag popularity was classified as not popular.
We found that @flowaccount/scully-plugin-lazy-load-picture-tag demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.