
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
@mirrormedia/dual-channel
Advanced tools
Build Dual Channel style infographic web page on demand
Dual Channel is a React Component to simultaneously present paragraphs and images in the browser viewport.
Install dependencies:
make check-dep
make dev-server
make build
make test-embedded-code
You can import either
Option 1:
import dualChannel from '@twreporter/dual-channel'
const ReactComponent = dualChannel.ReactComponent
or
Option 2:
import ReactComponent from '@twreporter/dual-channel/lib/app'
import Sheets from '@twreporter/dual-channel/lib/sheets'
const sheets = new Sheets({
spreadsheetId,
keyFile,
targetSheetsId,
})
The reaseon why Sheets is not exported in src/index.js is because it imports googleapis.
googleapis imports nodejs specific modules, which makes webpack build failure.
Thus, we need to import Sheets directly from its file.
The demo data file is dev/data.json,
and it is generated from this demo spreadsheet.
You can reproduce dev/data.json by the following sample codes.
import Sheets from './src/sheets'
import path from 'path'
import fs from 'fs'
const sheets = new Sheets({
spreadsheetId: '1Ppisv4HTZHYMp95umgCoADNuP1PSkL-t9na-5lRIqSY',
keyFile: path.resolve(__dirname, './spreadsheet-api-key-file.json'),
targetSheetsId: [2143095237, 492967532, 2049208510, 489341977, 1453335111],
})
sheets.getJSONData().then(data => {
fs.writeFileSync(
path.resolve(__dirname, './dev/data.json'),
JSON.stringify(data),
{ encoding: 'utf8' }
)
})
In the above sample codes,
you have to download service account and name it as spreadsheet-api-key-file.json.
The service account is used to be authenticated by Google Sheet API.
If you don't have service account, you can create one by
APIs & Services tabCredentials tabManage service accounts tabBesides createing service account, you also have to enable Google Sheets API.
APIs & Services tabLibrary tabGoogle Sheets APIGoogle Sheets APIimport Sheets from '@twreporter/dual-channel/lib/sheets'
import dualChannelUtils from '@twreporter/dual-channel'
const sheets = new Sheets({
spreadsheetId: '1Ppisv4HTZHYMp95umgCoADNuP1PSkL-t9na-5lRIqSY',
keyFile: path.resolve(__dirname, './spreadsheet-api-key-file.json'),
targetSheetsId: [2143095237, 492967532, 2049208510, 489341977, 1453335111],
})
sheets
.getJSONData()
.then(data => {
return dualChannelUtils.buildEmbeddedCode(data)
})
.then(embeddedCode => {
// You could copy embeddedCode and past it in html file
})
Google Sheets API in your project.$ cat spreadsheet-api-key-file.json | grep client_email
and share your spreadsheet with your service account email.
FAQs
Build Dual Channel style infographic web page on demand
We found that @mirrormedia/dual-channel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.

Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.

Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.