
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
collection of personal components which may, or may not be used in real-world products.
This is a collection of personal components which may, or may not be used in real-world products.
If you want, you can try it. There is no official support, this is just a public version of it.
It's tailored to my use-cases and is NOT generalized, like bootstrap. It's purpesfully flexible, hencewhy there are some quirks to make it play well (pretty much) everywhere.
Some of them are roughly outlined below.
The basic design - without any configuration, is insipired by both:
trying to achieve an best-of-both-worlds without any overloading just to make it fancy, or to restrict configuratabillity.
Singletons don't exist in normal JS, or are realized as module exports.
The traditional Singleton pattern shall ensure a simplistic, known way of recieving and handling those instances. Also, it will ensure lesser affine developers to always work with exactly the same instances each time and not accidentially creating a different one by an wrong export/import.
They are NOT intended to be used extensively in a parent project as this will create a deep connection with this library and your application.
You have been warned.
See global script.
activate CustomEventVanillaJS: activate
JSX: onActivate
Purpose: Standardizing the two special event types apart from onClick needed for correctly reflecting accesibillity cases and responsive device interaction.
Editors Note: non-vanilla js types need to be supplied by yourself. This package only provides the correct global type for Stencil. See types.d.ts.
Related documents:
Purpose: Basic ensurance that specific components that are intended to be colorable/overwritable to have the correct "light" or "dark" text-color applied.
Functions:
ensureColorContrastFor - Core utillity to implement in components to enforce the color contrast. Operates in a "forceful" and "flexible" mode.getBackgroundBrightnessFor - Core function to decide the lightness of an provided element's background. Only works with background-color, NOT imageslightTheme - Util function to apply logic only when the result is light, but intended is a dark theme.darkTheme - Util function to apply logic only when the result is dark, but intended is a light theme.Editors Note:
Flexible means you can overwrite both variants using the CSS-vars --text-on-dark and --text-on-light. Otherwise will fallback to Theme settings of the Application. In order to debug and ensure the acccsibillity of components, in dev mode, you'll be able to see the exact criterias that are met in order to apply the correct variant.
The contrast decision is leveraging requestAnimationFrame in order to apply the decision as-soon-as-possible, but might have to fractionally delay the decision when:
Related documents:
The internal TranslationService is NOT exposed globally
FAQs
collection of personal components which may, or may not be used in real-world products.
We found that @jmms/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.