
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@github/arianotify-polyfill
Advanced tools
Polyfill for the ARIA Notification API
The goal of this library is to polyfill ariaNotify so that it can be used seamlessly across browsers that support the native functionality, and those that don't. This adds the Element.prototype.ariaNotify and/or Document.prototype.ariaNotify functions if they do not exist, emulating the native functionality.
This is used in production on github.com.
In browsers where ariaNotify is supported it will emit a notification event. In browsers where it isn't supported this library will create a "fake" element that is an aria-live region, insert it into the DOM, and modify the text content of the element to place the given message in, achieving a similar effect to the native functionality.
This is only meant to be used in a browser context. It should not be used on the server. To install this you will likely need npm.
$ npm i @github/arianotify-polyfill
In your JavaScript you can introduce the polyfill using a "bare" import:
import "@github/arianotify-polyfill"
Then continue to use ariaNotify as if it were supported everywhere. A small contrived example:
button.ariaNotify("Saved")
This project is licensed under the terms of the MIT open source license. Please refer to MIT for the full terms.
The @github/accessibility and @github/primer teams maintain this library.
This library is provided "as is". Please feel free to file issues; however, we offer no time frame for correspondence or resolution of any issues.
Special thanks to Microsoft and the ARIA Working Group for making ariaNotify a possibility.
FAQs
Polyfill for the ARIA Notification API
The npm package @github/arianotify-polyfill receives a total of 621 weekly downloads. As such, @github/arianotify-polyfill popularity was classified as not popular.
We found that @github/arianotify-polyfill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 19 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.