
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@lovepop/note-editor
Advanced tools
A [Svelte](https://svelte.technology/guide) component for editing the contents of a Lovepop insert
A Svelte component for editing the contents of a Lovepop insert
If you're only working on note-editor, you can run lerna run build to build all sub-packages and then yarn dev in the note-editor directory to start the dev server. This will launch the storybook instance to preview your changes in.
If you cannot connect to the localhost files for colors and fonts, you can replace them in stores.js with the equivalent test fixtures, i.e. ../tests/fixtures/colors.
If you're working on typesetter or svg-writer at the same time, you should open each of those in a terminal and run yarn dev. This is order dependent so do typesetter -> svg-writer -> note-editor
yarn run info for a description of available npm scripts
For a tdd style workflow, you can run yarn watch:test to have your tests automaticaly update file changes. Run yarn testem to run all the tests in the browser. Note: You may have to run yarn watch:test before each new instance of yarn testem after any changes for the tests to run properly.
yarn run dev will launch a Storybookjs instance with examples of how to consume note-editor
<div id="notifications"></div>
import { Notifications } from '@lovepop/note-editor';
const notifications = new Notifications({ target: document.getElementById('notifications') });
/*
* adds a notification with type `error`.
* can be styled with `.ne-error` class
*/
notifications.error('Some error message', /* optional timeout in ms */);
/*
* adds a notification with type `warn`.
* can be styled with `.ne-warn` class
*/
notifications.warn('Some warning with optional timeout of 3 seconds', 3000);
/*
* adds a notification with type `success`.
* can be styled with `.ne-success` class
*/
notifications.success('Some success', /* optional timeout in ms */);
/*
* removes all notifications
*/
notifications.clearAll();
/* Removes the component from the DOM and removes any
* event listeners that were created. This will also
* fire a destroy event e.g. `notifications.on('destory', () => console.log('bye'))`
*/
notifications.destroy();
FAQs
A [Svelte](https://svelte.technology/guide) component for editing the contents of a Lovepop insert
We found that @lovepop/note-editor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.