
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@jaypha/webcomponents
Advanced tools
A set of vanilla web components that I have developed for various projects.
No framework required.
Available in ES6, UMD and CJS.
Important! As of version 2, lists no longer uses Bindable.
npm install --save @jaypha/webcomponents
Use --save-dev if you intend to incorporate this module into our own bundles.
A list component that constructs a list from a set of data. The list can be
Creates an editable area.
Enumerable display that allows you to set it's value, and it displays a label based on that value.
A replacement for the built in <input type='number'> that overcomes some of its
shortcommings.
2.0.1 Added Day.js as a dependency, to ensure that jayph-datecolumn will parse
dates correctly.
2.0.0 Stopped using Bindable. Row objects are now just ordinary object, so you can no
longer use getItem, setItem or removeItem.
You can still use bindable values by including them in a column definition.
Copyright (C) 2019 Jaypha.
Distributed under the Boost Software License, Version 1.0.
FAQs
A bunch of vanilla web coponents
We found that @jaypha/webcomponents demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.