
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@mizdra/eslint-plugin-layout-shift
Advanced tools
ESLint plugin to force responsive media elements to set the width/height attributes
ESLint plugin to force responsive media elements to set the width/height attributes
The Web has been using <img>
tags to load images since ancient times. However, the <img>
tag does not have any attribute to embed the aspect ratio. As a result, the size of the responsive img element cannot be determined until the browser fetches the image from the network and finishes loading, and there is a problem that Layout Shift occurs on the page.
To solve this problem, the idea of computing the layout using the width and height attributes has been proposed and is starting to be implemented in browsers.
This plugin forbids media element without an explicit size attributes to prevent Layout Shift from occurring.
You'll first need to install ESLint:
$ npm i eslint --save-dev
$ yarn add eslint --save-dev
Next, install @mizdra/eslint-plugin-layout-shift
:
$ npm install @mizdra/eslint-plugin-layout-shift --save-dev
$ yarn add @mizdra/eslint-plugin-layout-shift --save-dev
Add @mizdra/layout-shift
to the plugins section of your .eslintrc
configuration file.
{
"plugins": ["@mizdra/layout-shift"]
}
Then configure the rules you want to use under the rules section.
{
"rules": {
"@mizdra/layout-shift/require-size-attributes": 2
}
}
$ # Wait for passing CI...
$ git switch master
$ git pull
$ yarn version
$ npm publish
$ git push --follow-tags
FAQs
ESLint plugin to force responsive media elements to set the width/height attributes
The npm package @mizdra/eslint-plugin-layout-shift receives a total of 2,741 weekly downloads. As such, @mizdra/eslint-plugin-layout-shift popularity was classified as popular.
We found that @mizdra/eslint-plugin-layout-shift demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.