
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@tradeshift/elements.note
Advanced tools
Part of the reusable Tradeshift UI Components as Web Components. Demo
table { width:100%; }Property | Attribute | Type | Default | Description |
---|---|---|---|---|
icon | icon | String | ||
type | type | String | ||
dir | dir | String | ltr | |
closeable | closeable | Boolean | false | |
hidden | hidden | Boolean | false | |
buttons | buttons | Array |
Name | Description |
---|---|
default |
Name | Description |
---|---|
close | |
button-click |
$ npm i @tradeshift/elements.note --save
import '@tradeshift/elements.note';
or
<script src="node_modules/@tradeshift/elements.note/lib/note.umd.js"></script>
Use it like demo
Our components rely on having the Open Sans
available, You can see the font-weight
and font-style
you need to load here, or you can just load it from our package (for now)
<link rel="stylesheet" href="node_modules/@tradeshift/elements/src/fonts.css" />
For supporting IE11 you need to add couple of things
<!-- Place this in the <head>, before the Web Component polyfills are loaded -->
<script>
if (!window.Promise) {
window.ShadyCSS = { nativeCss: true };
}
</script>
$ npm i @open-wc/polyfills-loader
import loadPolyfills from '@open-wc/polyfills-loader';
loadPolyfills().then(() => import('./my-app.js'));
$ npm i @webcomponents/webcomponentsjs --save
<script src="/node_modules/@webcomponents/webcomponentsjs/custom-elements-es5-adapter.js"></script>
@webcomponents/webcomponentsjs
<script src="/node_modules/@webcomponents/webcomponentsjs/webcomponents-loader.js" defer></script>
Thanks for your interest and help!
You can find some links to useful materials about what we are using and some tutorials and articles that can help you get started.
You can see a list of limitations that we should watch out for, here
You can read the full license agreement in the LICENSE.md.
FAQs
Unknown package
The npm package @tradeshift/elements.note receives a total of 2 weekly downloads. As such, @tradeshift/elements.note popularity was classified as not popular.
We found that @tradeshift/elements.note demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.