Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@lit-labs/scoped-registry-mixin
Advanced tools
A mixin for using speculative "scoped CustomElementRegistry" with LitElement.
ScopedRegistryHost
mixin for LitElement
that integrates with the speculative Scoped CustomElementRegistry polyfill.
🚨 Warning: Scoped Custom Element Registries is a proposed browser API. It has not been finalized nor shipped in any browser. This mixin is provided to evaluate the proposal and facilitate feedback. Use this feature, and the polyfill in production code at your own risk.
The Scoped Custom Element Registries WICG proposal introduces new APIs for scoping custom element definitions to shadow roots, such that the mapping of tag names to custom element class doesn't rely on a single global registry.
When new elements are created within a shadow root with a scoped custom element registry, the browser will use the scoped registry rather than the global registry to look up custom element definitions. When using a scoped element registry, all used custom element elements must be defined within that scope.
ScopedRegistryHost
adds the following features to LitElement:
attachShadow()
to enable scopingA speculative Scoped CustomElementRegistry polyfill is being developed. Because the proposal is not implemented natively, ScopedRegistryHost
requires the polyfill.
The mixin adds a declarative static elementDefinitions
property for declaring the custom elements to be scoped locally to its Shadow DOM.
Basic usage is as follows:
import {LitElement, html} from 'lit';
import {ScopedRegistryHost} from '@lit-labs/scoped-registry-mixin';
import {SimpleGreeting} from './simple-greeting.js';
class ScopedComponent extends ScopedRegistryHost(LitElement) {
// Elements here will be registered against the tag names provided only
// in the shadow root for this element
static elementDefinitions = {
'simple-greeting': SimpleGreeting,
};
render() {
return html` <simple-greeting
id="greeting"
name="scoped world"
></simple-greeting>`;
}
}
Please see CONTRIBUTING.md.
FAQs
A mixin for using speculative "scoped CustomElementRegistry" with LitElement.
The npm package @lit-labs/scoped-registry-mixin receives a total of 2,058 weekly downloads. As such, @lit-labs/scoped-registry-mixin popularity was classified as popular.
We found that @lit-labs/scoped-registry-mixin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.