Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@rich-id/cookies-regulation
Advanced tools
You can install the library with npm or with yarn:
# NPM
npm install @rich-id/cookies-regulation
# Yarn
yarn add @rich-id/cookies-regulation
Add the library to your js
import CookiesRegulation from '@rich-id/cookies-regulation';
OR
window.CookiesRegulation = require('@rich-id/cookies-regulation');
<script>
CookiesRegulation.init(
{
website: 'Cookies Regulation', /* Name of your site (1) */
privacyPolicy: {
url: 'https://example.com/privacy', /* Privacy policy url (2) */
label: 'Privacy Policy', /* Privacy policy link label (2) */
openInNewWindow: true, /* Does the link open in a new window (2) */
},
modal: {
header: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras hendrerit, velit vitae accumsan pellentesque, sapien arcu gravida nibh, at accumsan nulla sapien sed magna. Integer sed sem dolor. Pellentesque feugiat, quam quis dapibus vehicula, risus morbi.', /* The text Display in the header of the modal (3) */
relatedCompaniesCount: 5, /* Number of third party companies (4) */
relatedCompaniesPrivacyPolicyUrl: '' /* Link of third party companies (4) */
},
services: {
googleTagManager: { /* Auto-configured service */
name: 'Google Tag Manager', /* Service name (5) */
description: 'Tag management system', /* Service description (6) */
conservation: '6 months.', /* Cookies conservation (7) */
service: 'googleTagManager',
options: {id: 'GTM-TEST'},
},
cookieTest1: { /* Manual service configuration */
name: 'Test Cookie', /* Service name (5) */
description: 'Test description.', /* Service description (6) */
conservation: '1 year.', /* Cookies conservation (7) */
mandatory: false, /* Is the service mandatory */
initializationCallback: function () {
}
},
cookieTest2: {
name: 'Other test cookie',
description: null,
conservation: '6 months.',
mandatory: true,
},
cookieTest3: {
name: 'Other test cookie 2',
description: null,
conservation: 'until you log out.',
mandatory: true,
}
},
locale: 'en', /* Local: en|fr */,
decisionLogCallback: (decision) => {
// Code to log decision metadata on the backend which is a GDPR requirement
// The decision object contains user choices, the date the decision was made
// and an uuid to allow anonymous storage on the backend.
}
}
);
</script>
window.CookiesRegulation.openModal();
tour-bundle follows semantic versioning. In short the scheme is MAJOR.MINOR.PATCH where
Versions bellow 1.0.0 are considered experimental and breaking changes may occur at any time.
Contributions are welcomed! There are many ways to contribute, and we appreciate all of them. Here are some of the major ones:
master
branch.As a reminder, all contributors are expected to follow our Code of Conduct.
You might use Docker and docker-compose
to hack the project. Check out the following commands.
# Start the project
docker-compose up -d
# Run a bash within the container
docker-compose exec application bash
# Using a local build in a project
yarn install && yarn build && yarn pack # build a package.tgz
cd path/to/project # go in the root directory of your project
yarn add file:path/to/package.tgz # install the locally built package
tour-bundle is distributed under the terms of the MIT license.
See LICENSE for details.
FAQs
![Logo](.github/cookies-regulation.svg)
The npm package @rich-id/cookies-regulation receives a total of 107 weekly downloads. As such, @rich-id/cookies-regulation popularity was classified as not popular.
We found that @rich-id/cookies-regulation demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.