
Security News
NVD Concedes Inability to Keep Pace with Surging CVE Disclosures in 2025
Security experts warn that recent classification changes obscure the true scope of the NVD backlog as CVE volume hits all-time highs.
@the-grid/ed
Advanced tools
npm start
:warning: WIP; not in production yet. :warning:
Using ProseMirror with data from the Grid API
Demo: the-grid.github.io/ed/
The demo shows translating from ProseMirror to the the Grid API JSON and back.
ProseMirror provides a high-level schema-based interface for interacting with contenteditable
, taking care of that pain. This project is focused on:
ed = new Ed({
// Where ed will mount
container: document.querySelector('#ed'),
// Content array from post
content: [],
menutip: true,
menubar: false,
// Hit with each change
onChange: function () { console.log('change') }
})
ed.content
once, after which ed has responsibility for the content.new Ed
.ed.content
takes some processing and should not be done on every change.Demo: ./demo/demo.js
npm start
and open http://localhost:8080/
In development mode, webpack builds and serves the targets in memory from /webpack/
Changes will trigger a browser refresh.
Plugins are ES2015 classes with 2 required methods:
constructor (ed) {}
gets a reference to the main ed
, where you can
ed.pm.on('flushed', ...)
ed.pluginContainer.appendChild(...)
teardown () {}
where all listeners and UI should be removedWidgets are mini-editors built to edit specific media types
Run in iframe and communicate via postMessage
Example: ced - widget for code editing
Example: WIP
Feross standard checked by ESLint with npm test
or npm run lint
npm test
npm run build
Outputs minified dist/ed.js and copies widgets defined in package.json.
FAQs
the grid api with prosemirror
The npm package @the-grid/ed receives a total of 139 weekly downloads. As such, @the-grid/ed popularity was classified as not popular.
We found that @the-grid/ed demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 19 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Security experts warn that recent classification changes obscure the true scope of the NVD backlog as CVE volume hits all-time highs.
Security Fundamentals
Attackers use obfuscation to hide malware in open source packages. Learn how to spot these techniques across npm, PyPI, Maven, and more.
Security News
Join Socket for exclusive networking events, rooftop gatherings, and one-on-one meetings during BSidesSF and RSA 2025 in San Francisco.