
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@livepreso/webpack-deck
Advanced tools
Two plugins live at the heart of this project
This reads your project.yaml file and automatically generates base index.html
files in a structure the LivePreso servers expect. For example if your project.yaml
has the following:
key: test_section_1
title: 'Test Section 1'
slides:
- {key: 'test_slide_1', title: 'Test Slide 1'}
- {key: 'test_slide_2', title: 'Test Slide 2'}
Then the output would look like the following:
sections
└── test_section_1
├── index.html
└── slides
├── test_slide_1
│ └── index.html
└── test_slide_2
└── index.html
This can be found in plugins/project.js and could be included manually in
your webpack config like so:
const { ProjectPlugin } = require("@livepreso/webpack");
module.exports = {
plugins: {
new ProjectPlugin()
}
}
This is a postcss plugin that is used to prevent bleeding of global styles
from affecting elements outside of the presentation. Essentially it adds
#slideshow to the start of most styles.
It could be manually added to your config like so:
const { LivePresoPostCSSPrefixer } = require("@livepreso/webpack-deck");
// In your webpack rules...
rules: [
{
test: /\.s[ac]ss/i,
use: [
"css-loader",
{
loader: "postcss-loader",
options: {
postcssOptions: {
plugins: [LivePresoPostCSSPrefixer],
},
},
},
"sass-loader",
],
},
],
FAQs
Webpack config and plugins for LivePreso content development
We found that @livepreso/webpack-deck demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.