
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@wordpress/block-library
Advanced tools
Block library for the WordPress editor.
Install the module
npm install @wordpress/block-library --save
This package assumes that your code will run in an ES2015+ environment. If you're using an environment that has limited or no support for such language features and APIs, you should include the polyfill shipped in @wordpress/babel-preset-default
in your code.
If a view.js
file (or a file prefixed with view
, e.g. view-example.js
) is present in the block's directory, this file will be built along other assets, making it available to load from the browser.
This enables us to, for instance, load this file when the block is present on the page in two ways:
render_callback
:function render_block_my_block() {
$script_path = __DIR__ . '/my-block/view.js';
if ( file_exists( $script_path ) ) {
wp_enqueue_script(
'wp-block-my-block-view',
plugins_url( 'view.js', $script_path ),
array(),
false,
true
);
}
}
function register_block_my_block() {
register_block_type(
__DIR__ . '/my-block',
array(
'render_callback' => 'render_block_my_block',
)
);
}
add_action( 'init', 'register_block_my_block' );
render_block
filter:function render_block_my_block() {
$script_path = __DIR__ . '/my-block/view.js';
if ( file_exists( $script_path ) ) {
wp_enqueue_script(
'wp-block-my-block-view',
plugins_url( 'view.js', $script_path ),
array(),
false,
true
);
}
}
apply_filter( 'render_block', 'render_block_my_block' );
Function to register core blocks provided by the block editor.
Usage
import { registerCoreBlocks } from '@wordpress/block-library';
registerCoreBlocks();
Parameters
Array
: An optional array of the core blocks being registered.This is an individual package that's part of the Gutenberg project. The project is organized as a monorepo. It's made up of multiple self-contained software packages, each with a specific purpose. The packages in this monorepo are published to npm and used by WordPress as well as other software projects.
To find out more about contributing to this package or Gutenberg as a whole, please read the project's main contributor guide.
⚠️ Adding new blocks to this package requires additional steps!
Do not forget to register your new block in the index.js
file of this package. For example, if you were to add a new core block called core/blinking-paragraph
, you would have to add something like:
// packages/block-library/src/index.js
import * as blinkingParagraph from './blinking-paragraph';
// Then add `blinkingParagraph` to either `__experimentalGetCoreBlocks()`
// or `__experimentalRegisterExperimentalCoreBlocks()`
Register your block in the gutenberg_reregister_core_block_types()
function of the lib/blocks.php
file. Add it to the block_folders
array if it's a static block or to the block_names
array if it's a dynamic block.
FAQs
Block library for the WordPress editor.
The npm package @wordpress/block-library receives a total of 20,138 weekly downloads. As such, @wordpress/block-library popularity was classified as popular.
We found that @wordpress/block-library demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.