
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@wcagc/source-tag
Advanced tools
A zero-runtime Vite plugin that adds deterministic data-wcagc-src="relative/file.tsx:line:column" attributes to lowercase JSX host elements. The wcagc browser extension can display those build facts without guessing a source file.
Source, tests, and CI are published at WCAG-Compliance/wcagc-source-tag under the MIT license.
import { defineConfig } from "vite";
import sourceTag from "@wcagc/source-tag";
export default defineConfig({ plugins: [sourceTag()] });
The plugin applies only to Vite's development server by default. For a controlled staging build, use sourceTag({ includeInBuild: true }). This exposes relative repository paths in rendered markup; assess that disclosure before enabling it. root, include, exclude, and attribute can be customized. Generated maps use only the validated relative source path and do not embed source content. No absolute path is emitted and no runtime code is added.
FAQs
Deterministic JSX source attributes for wcagc browser checks
The npm package @wcagc/source-tag receives a total of 7 weekly downloads. As such, @wcagc/source-tag popularity was classified as not popular.
We found that @wcagc/source-tag demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.