Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@shopify/slate-analytics
Advanced tools
Slate Analytics enables Shopify to track Slate user events, performance data, and errors to Shopify's analytics platform.
For more information, visit the Wiki.
v1.0.0-beta.12 (2018-10-25)
All pre-exisiting logic and operations that were performed to folders inside the the src/assets
directory has been removed. All contents of the assets folder are now statically copied to the dist/assets
folder.
The src/assets/scripts
directory has moved to src/scripts
.
The src/assets/styles
directory has moved to src/styles
.
SVGs contained in the src/assets/svgs
directory, which were copied to the dist/snippets
directory and renamed to .liquid
files, should now be moved into the src/snippets
directory and manually renamed with a .liquid
extension. This will allows these SVGs to continue to be inlined into your theme via the {% include %}
tag.
Referencing assets via relative paths, e.g. <img src"{{ '../assets/images/my-image.jpg' | asset_url }} />
, has been replaced by native Shopify asset references, e.g. <img src"{{ 'my-image.jpg' | asset_url }} />
.
See Pull Request #850 for all the details.
slate-env
html-webpack-liquid-asset-tags-plugin
, slate-config
, slate-liquid-asset-loader
, slate-tools
slate-tools
FAQs
Slate's analytics controller and event emitter
The npm package @shopify/slate-analytics receives a total of 17 weekly downloads. As such, @shopify/slate-analytics popularity was classified as not popular.
We found that @shopify/slate-analytics demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.