
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@lgv/ring-chart
Advanced tools
ES6 d3.js ring chart visualization.
# install package
npm install @lgv/ring-chart
The following values are the expected input data structure; id is optional.
[
{
"id": "a",
"label": "xyz",
"value": 1
},
{
"id": "b",
"label": "abc",
"value": 3
}
]
import { RingChart } from "@lgv/ring-chart";
// have some data
let data = [
{
"id": "a",
"label": "xyz",
"value": 1
},
{
"id": "b",
"label": "abc",
"value": 3
}
]
// initialize
const rc = new RingChart(data);
// render visualization
rc.render(document.body);
The following values can be set via environment or passed into the class.
| Name | Type | Description |
|---|---|---|
LGV_HEIGHT | integer | height of artboard |
LGV_WIDTH | integer | width of artboard |
Style is expected to be addressed via css. Any style not met by the visualization module is expected to be added by the importing component.
| Class | Element |
|---|---|
lgv-ring-chart | top-level svg element |
lgv-arc | ring arc element |
lgv-label | arc text label element |
# clone repository
git clone <repo_url>
# update directory context
cd ring-chart
# run docker container
docker run \
--rm \
-it \
-v $(pwd):/project \
-w /project \
-p 8080:8080 \
node \
bash
# FROM INSIDE RUNNING CONTAINER
# install module
npm install .
# run development server
npm run example
# view visualization in browser at http://localhost:8080
FAQs
ES6 d3.js ring chart visualization
We found that @lgv/ring-chart demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.