
Security News
New React Server Components Vulnerabilities: DoS and Source Code Exposure
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.
@visual-framework/vf-banner-elixir
Advanced tools
This should be placed in the footer of sites that are part of the ELIXIR network.
This is an early version that is largely a port of the VF 1.3 ELIXIR Banner with some notable changes:
data-name is now data-vf-banner-elixir-name, and similarly for the other options.data-vf-js-banner-elixir-logo="" (optional)
CDR will use the ELIXIR Core Data Resource mark.data-vf-js-banner-elixir-name="Your Service Name" (optional)
data-vf-js-banner-elixir-description="text here" (optional)
data-vf-js-banner-elixir-link="https://url" (optional)
The development and future direction of this component can be discussed in issue #1572. While breaking changes are anticipated they are currently not expected.
This component leverages the Sass/CSS of vf-banner, so it should also be installed.
This component targets WCAG 2.1 AA accessibility.
You can also read about the Visual Framework's approach to accessibility.
This repository is distributed with [npm][https://www.npmjs.com/]. After [installing npm][https://www.npmjs.com/get-npm] and yarn, you can install vf-banner-elixir and the supporting vf-banner with this command.
$ yarn add --dev @visual-framework/vf-banner-elixir @visual-framework/vf-banner
You should import this component in ./components/vf-component-rollup/scripts.js or your other JS process:
import { vfBannerElixir } from 'vf-banner-elixir/vf-banner-elixir';
// Or import directly
// import { vfBannerElixir } from '../components/raw/vf-banner-elixir/vf-banner-elixir.js';
vfBannerElixir(); // if needed, invoke it
The style files included are written in Sass. If you're using a VF-core project, you can import it like this:
@import 'vf-banner/vf-banner.scss';
@import "@visual-framework/vf-banner-elixir/vf-banner-elixir.scss";
Make sure you import Sass requirements along with the modules. You can use a project boilerplate or the vf-sass-starter
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.