Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@harvard-lts/mirador-analytics-plugin
Advanced tools
Mirador plugin for analytics. Currently formatted for use with Google Tag Manager.
nvm use
to ensure your version of matches that in the .nvmrc
filenpm i
to install dependenciesThe following are some useful scripts can be ran using npm run <script>
. A full list can be seen in package.json
Script | Description |
---|---|
clean | Removes the dist directories |
build | Builds the source files into the ./dist directory |
serve | Runs a local web server where the plugin can be viewed in a vanilla Mirador instance (helpful for testing and development) |
test | Runs the automated test suites |
The mirador-analytics-plugin
requires an instance of Mirador 3. Visit the Mirador wiki to learn how to install an existing plugin and for additional information about plugins.
Package you will need to install:
npm i @harvard-lts/mirador-analytics-plugin
Configurations for this plugin are injected when Mirador is initialized under the miradorAnalyticsPlugin
key. See the demo entry for an example of importing and configuring mirador-analytics-plugin
.
...
id: 'mirador',
miradorAnalyticsPlugin: {
...
}
...
Config Key | Type | Description |
---|---|---|
containerId | string | ID assigned in Google Tag Manager, formatted as GTM-XXXXXXX (this can be found in the top right corner of the Workspace page) |
Mirador's development, design, and maintenance is driven by community needs and ongoing feedback and discussion. Join us at our regularly scheduled community calls, on IIIF slack #mirador, or the mirador-tech and iiif-discuss mailing lists. To suggest features, report bugs, and clarify usage, please submit a GitHub issue.
FAQs
mirador-analytics-plugin React component
We found that @harvard-lts/mirador-analytics-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.