Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@marcoms/make-element
Advanced tools
make-element provides a simple and ergonomic system for creating Web Components. It is lightweight, imperative1, supports Shadow DOM, and supports property/attribute binding.
const CounterElement = makeElement({
props: {
counter: {
init: 1,
set(counter) {
this.$['counter'].textContent = counter;
},
},
},
methods: {
increment() {
++this.counter;
},
},
ready() {
this.$['increment-button'].onclick = () => {
this.increment()
};
},
shadowDom: true,
template: `
<div id="counter"></div>
<button id="increment-button">Increment</button>
`,
});
customElements.define('counter-element', CounterElement);
<counter-element></counter-element>
makeElement(definition={})
Produces a custom element class that can be passed to customElements.define
.
props
Collection of properties to register for the custom element. All configuration fields (attr
, get
, set
, …) are optional
init
Initial value of the property to use, unless the property is bound to an attribute with attr
(e.g. attr: 'foo'
) and initialized in markup (e.g. <x-element foo="24"></x-element>
)
attr
Default: (none)
Attribute name to bind to
Every time the property is set, the value will flow into the attribute name specified here via coerce()
, then toAttr()
A property can be initialised through markup by supplying an attribute value, but subsequent changes to the attribute will not flow back to the property -- binding is therefore one-way from property to attribute
myProp: {
attr: 'my-attr',
}
<my-element my-attr="24"></my-element>
myElement.myProp; // -> 24 (initialised from attribute)
myElement.myProp = 32;
myElement.getAttribute('my-attr'); // -> 32 (flowed from property)
myElement.setAttribute('my-attr', 48);
myElement.myProp; // -> 32 (no change)
get(val)
Getter function called when the property is accessed
get(fullName) {
const [firstName, lastName] = fullName.split(' ');
return {firstName, lastName};
}
set(val)
Setter function called on every update to the property value
set(val) {
console.log('property was set to', val);
}
coerce(val)
Function used to modify the property value before it is stored and passed to set()
coerce(val) {
return Number.parseInt(val, 10);
}
toAttr(val)
Function used to modify the property value when storing into an attribute
fromAttr(val)
Function used to modify the attribute value if the property is initialized from the attribute
methods
Collection of methods to assign to the custom element prototype
methods: {
myMethod() {
console.log('hello from myMethod');
},
}
myElement.myMethod(); // -> hello from myMethod
shadowDom
Default: false
If true, shadow DOM will be used for templating
See http://caniuse.com/#feat=shadowdomv1
template
HTML template to initialise the custom element with
If templateUrl
is also defined, template
will be used
templateUrl
Like template
, but fetches the template from this URL
If template
is also defined, template
will be used
cacheIds
Default: true
If true, elements in the template with an id
attribute will be stored in the $
property for easy and fast referencing.
cacheIds: true,
template: `<p id="hello">hello</p>`,
ready() {
this.$['hello'].onclick = () => {
console.log('hello');
};
},
ready()
Function invoked once the custom element has initialised its template and connected to the DOM
MIT (see license.txt
)
1: For a functional-style custom elements library, see skatejs
FAQs
Create custom elements without boilerplate
The npm package @marcoms/make-element receives a total of 1 weekly downloads. As such, @marcoms/make-element popularity was classified as not popular.
We found that @marcoms/make-element demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.