
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
@visual-framework/vf-navigation
Advanced tools
The vf-navigation
component is a horizontal list of links to key pages of the website.
This variant of the vf-navigation
is to be used as part of the vf-global-header
to give a few 'quick links' that will be on every page.
This variant of the vf-navigation
can be used to link to sections of the site, or part of the site the parent section.
This is typically placed below the vf-hero
component but can be also found below the vf-global-header
.
There should be only one use of vf-navigation--main
on a page.
The vfNavigationOnThisPage
JavaScript adds a quality-of-life improvement by automatically activating sections as the user scrolls them into view on the page. This sticky element allows users to quickly jump between sections on longer pages.
vf-navigation--on-this-page
on a page.id="container-1"
. This can be added to any item on the page, but would most logically be added to a vf-grid
, embl-grid
or vf-section-header
element.data-vf-js-navigation-on-this-page-container="true"
is present on .vf-navigation__list
.data-vf-js-navigation-on-this-page-link
.This component is distributed with npm. After installing npm, you can install the vf-navigation
with this command.
$ yarn add --dev @visual-framework/vf-navigation
The source files included are written in Sass(scss
). You can point your Sass include-path
at your node_modules
directory and import it like this.
@import "@visual-framework/vf-navigation/index.scss";
Make sure you import Sass requirements along with the modules. You can use a project boilerplate or the vf-sass-starter
If using the vf-navigation--on-this-page
variant, you should import this component in ./components/vf-component-rollup/scripts.js
or your other JS process:
import { vfNavigationOnThisPage } from "vf-navigation/vf-navigation.js";
// Or import directly
// import { vfGaIndicateLoaded } from '../components/raw/vf-navigation/vf-navigation.js';
vfNavigationOnThisPage();
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.