
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@pexip-engage-public/color-utils
Advanced tools
**Warning**: This is a [pure ESM package](https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c)
Warning: This is a pure ESM package
The purpose of this color calculator is guarding the WCAG 2.0 rules when being provided with a foreground color (text color) and background-color (brand color) by calculating a shade that meets the requirements.
WAI-ARIA, the Accessible Rich Internet Applications Suite, defines a way to make Web content and Web applications more accessible to everyone. It especially helps with dynamic content and advanced user interface controls developed with HTML, JavaScript, and related technologies.
Contrast and color use are vital to accessibility. Users, including users with visual disabilities, must be able to perceive content on the page. It is important that all content on the page is legible to everyone.
There are 3 levels in Accessibility rules: A, AA, AAA. The more A's the more compliant it is.
A
: Minimal compliance, mostly focuses on keyboard navigation and non-text alternatives.AA
: This is the most used rule and legally required level in multiple countries.AAA
: Though not a hard legal requirement (as of writing), this is the ideal conformance level which ensures that a page's or site's web content is accessible.color contrast
: In WCAG 2, contrast is a measure of the difference in perceived "luminance" or brightness between two colors (the phrase "color contrast" is never used). This brightness difference is expressed as a ratio ranging from 1:1 (e.g. white on white) to 21:1 (e.g., black on a white). To give a frame of reference, on a white background.
A
or lowest
: Does not focus on color contrast.AA
or midrange
: The visual presentation of text and images of text has a contrast ratio of at least 4.5:1.AAA
or highest
: The visual presentation of text and images of text has a contrast ratio of at least 7:1.The color generator can be installed as an npm package:
$ npm install --save @pexip-engage-public/color-utils
or
$ yarn install @pexip-engage-public/color-utils
or
$ pnpm install @pexip-engage-public/color-utils
In this basic example, we pass our brandHex to the calculateColor
import { calculateColor } from "@pexip-engage-public/color-utils";
const brandHex = "#6366F1";
const newColor = calculateColor({ brandHex });
interface Params {
brandHex: string;
textColor?: "FFF" | "000" | undefined;
accessibilityLevel?: "midrange" | "highest" | undefined;
}
Where the accessibilitylevel is:
AA
= midrange
AAA
= highest
Example:
import { calculateColor } from "@pexip-engage-public/color-utils";
const brandHex = "#6366F1";
const newColor = calculateColor({ brandHex, textColor="000", accessibilityLevel = "midrange" });
FAQs
**Warning**: This is a [pure ESM package](https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c)
The npm package @pexip-engage-public/color-utils receives a total of 66 weekly downloads. As such, @pexip-engage-public/color-utils popularity was classified as not popular.
We found that @pexip-engage-public/color-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.