
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@stackoverflow/stacks-editor
Advanced tools
Stacks-Editor is a combination rich text / markdown editor that powers Stack Overflow's post editing experience.
Stacks-Editor is a combination rich text / markdown editor that powers Stack Overflow's post editing experience.
npm install @stackoverflow/stacks-editor
<div id="editor-container"></div>
import { StacksEditor } from "@stackoverflow/stacks-editor";
// don't forget to include the styles as well
import "@stackoverflow/stacks-editor/dist/styles.css";
// include the Stacks js and css as they're not included in the bundle
import "@stackoverflow/stacks";
import "@stackoverflow/stacks/dist/css/stacks.css";
new StacksEditor(
document.querySelector("#editor-container"),
"*Your* **markdown** here"
);
<!--include Stacks -->
<link rel="stylesheet" href="path/to/node_modules/@stackoverflow/stacks/dist/css/stacks.css" />
<!-- include the bundled styles -->
<link
rel="stylesheet"
href="path/to/node_modules/@stackoverflow/stacks-editor/dist/styles.css"
/>
<div id="editor-container"></div>
<!-- highlight.js is not included in the bundle, so include it as well if you want it -->
<script src="//unpkg.com/@highlightjs/cdn-assets@latest/highlight.min.js"></script>
<!--include Stacks -->
<script src="path/to/node_modules/@stackoverflow/stacks/dist/stacks.min.js"></script>
<!-- include the bundle -->
<script src="path/to/node_modules/@stackoverflow/stacks-editor/dist/app.bundle.js"></script>
<!-- initialize the editor -->
<script>
new window.stacksEditor.StacksEditor(
document.querySelector("#editor-container"),
"*Your* **markdown** here",
{}
);
</script>
npm i
npm start
Run all unit tests (no end-to-end tests) using
npm test
Run all end-to-end tests (written in Playwright) using
npm run test:e2e
End-to-end tests need to follow the convention of using someName.e2e.test.ts
as their filename. They'll automatically get picked up by the test runner this way.
Generate a stats.json
file for analysis using
npm run print-stats
You can upload your stats.json
file here or here for visualization. See more resources here.
First, bump the package version and push the commit + tags:
> npm run release
> git push --follow-tags
Next, publish the package (this will run the build step before publishing):
> npm publish
Afterwards, create a GitHub release with the new content from CHANGELOG.md
.
0.9.0 (2023-10-06)
FAQs
Stacks-Editor is a combination rich text / markdown editor that powers Stack Overflow's post editing experience.
The npm package @stackoverflow/stacks-editor receives a total of 1,567 weekly downloads. As such, @stackoverflow/stacks-editor popularity was classified as popular.
We found that @stackoverflow/stacks-editor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.