
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@startinblox/component-conversation
Advanced tools
<solid-conversation> displays a conversation similar to what can be found within Facebook groups.
To associate the conversation to a containing resource, for instance an ActionGroup that would contain Conversations, one can do :
<solid-conversation
nested-field="conversations"
bind-resources
></solid-conversation>
In your django project, add the djangoldp_conversation package:
# settings.py
DJANGOLDP_PACKAGES = [
'djangoldp_conversation',
]
Once the package is installed, you can use the solid-conversation component:
<html>
<head>
<!-- import the module in the head of the page -->
<script type="module" src="https://cdn.jsdelivr.net/npm/@startinblox/component-conversation"></script>
</head>
<body>
<!-- use the component -->
<solid-conversation
data-src="[url]"
nested-field="conversations"
></solid-conversation>
</body>
</html>
The component will look for these properties:
http://happy-dev.fr/owl/#title: content of the initial message
http://happy-dev.fr/owl/#text: content of a reply
http://happy-dev.fr/owl/#author_user: author of a message
foaf:depiction: avatar of a user
| Name | Default | Description |
|---|---|---|
data-src | undefined | URL of the LDP conversation(s) to display. |
nested-field | "" | String added at the end of the data source URL. If you use the djangoldp_conversation package, leave it to conversations. |
extra-context | {} | Custom extra context |
date-format | "DD/MM/YYYY | Format of the date displayed. For more informations about available formats, look at the moment.js doc. |
send-button-text | "Envoyer" | Text of the 2 buttons validating the forms |
comment-input-label-text | "Créer une conversation" | Label displayed before the main textarea |
comment-input-placeholder-text | "Votre message" | Placeholder displayed in the main textarea |
answer-label-text | "Répondre" | Text of the "Reply" link |
answer-input-placeholder-text | "Votre message" | Placeholder displayed in the "reply" textarea |
To customize your component, you can set the css variable --solid-conversation-theme anywhere in your stylesheet to the color you want.
For example:
:root{
--solid-conversation-theme: #1abba6;
}
FAQs
Conversation component for startinblox
The npm package @startinblox/component-conversation receives a total of 6 weekly downloads. As such, @startinblox/component-conversation popularity was classified as not popular.
We found that @startinblox/component-conversation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.