
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@tiptap/extension-mathematics
Advanced tools
Tiptap is a headless wrapper around ProseMirror – a toolkit for building rich text WYSIWYG editors, which is already in use at many well-known companies such as New York Times, The Guardian or Atlassian.
Documentation can be found on the Tiptap website.
Tiptap is open sourced software licensed under the MIT license.
v3.6.0
Improve typing and docs for EditorOptions.element
to reflect all supported mounting modes and align behavior across adapters.
element
now accepts:
Element
: the editor is appended inside the given element.{ mount: HTMLElement }
: the editor is mounted directly to mount
(no extra wrapper).(editorEl: HTMLElement) => void
: a function that receives the editor element so you can place it anywhere in the DOM.null
: no automatic mounting.Parse cell colwidth
from nearest <colgroup>
when missing on the cell
When importing HTML, table column widths are often declared on a surrounding <colgroup>
rather than on each <td>
. Previously, tableCell
only read the colwidth
attribute from the cell itself and would lose width information in that case. The implementation now falls back to reading the corresponding <col>
's width
from the table's <colgroup>
using the cell's index.
This is a non-breaking bugfix that preserves layout information when HTML uses <colgroup>
. Consider adding a small demo or unit test to assert colwidth is preserved for cells when only the <colgroup>
contains width attributes.
Fixes table wrapper replacement and lost selections when resizable: true
.
TableView.ignoreMutation now ignores attribute/childList/characterData mutations that occur inside the table wrapper but outside the editable contentDOM
, preventing wrapper re-creation during resize interactions so selections (e.g. mergeCells()
) are preserved.
No API or breaking changes.
Remove recently added updateBubbleMenuPosition
method because it would not work in the React and Vue versions of the BubbleMenu, only in the vanilla extension. And that would confuse developers.
Write the transactionHandler
method as an arrow function because arrow functions have no this
, so the this
remains the instance of the BubbleMenuView
class.
Create a utility to add unique IDs to a document in the server
The utility is called generateUniqueIds
and is exported from the @tiptap/extension-unique-id
package.
It has the same functionality as the UniqueID
extension, but without the need to create an Editor
instance. This lets you add unique IDs to the document in the server.
It takes the following parameters:
doc
: The Tiptap JSON document to add unique IDs to.extensions
: The extensions to use. Must include the UniqueID
extension.It returns the updated Tiptap JSON document, with the unique IDs added to the nodes.
attrs
through Vue 3 menusFAQs
latex math extension for tiptap
The npm package @tiptap/extension-mathematics receives a total of 30,132 weekly downloads. As such, @tiptap/extension-mathematics popularity was classified as popular.
We found that @tiptap/extension-mathematics demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.