Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A super easy and lightweight javascript animation library.
AniX is a lightweight and easy-to-use animation library with excellent performance and good compatibility for modern browsers.
It uses the native css transition attribute, better than js simulation animation performance. And you can also enable hardware acceleration with it.
AniX only less than 3k(gzip) in size. It achieves almost the same effect as any other huge library of animations.
View demo, please click here.
$ npm install anix --save-dev
...
import { AniX } from 'anix';
<script src="./js/anix.umd.ts" type="text/javascript"></script>
<script src="./js/jquery.min.js" type="text/javascript"></script>
<script src="./js/anix.jq.js" type="text/javascript"></script>
AniX.to(dom, 1, {
x: 300,
y: 10,
scale: 2,
delay: 0.5,
onComplete: function() {
alert('over');
},
});
// or
AniX.to(dom, 1, {
width: '200px',
'background-color': '#ffcc00',
ease: AniX.ease.easeOutBack,
onComplete: () => {
//STATE : COMPLETED!
console.log('STATE : COMPLETED!');
},
});
$('.demo')
.css({ left: '0px' })
.to(0.5, {
left: '500px',
'background-color': '#ffcc00',
});
class MyComponent extends React.Component {
constructor(props) {
super(props);
this.myRef = React.createRef();
this.clickHandler = this.clickHandler.bind(this);
}
clickHandler(e) {
const node = this.myRef.current;
// animation
AniX.to(node, 1, {
x: 300,
y: 10,
scale: 2,
});
}
render() {
return (
<div>
<div ref={this.myRef} />
<button onClick={this.clickHandler}></button>
</div>
);
}
}
There are a lot of animation libraries Why use AniX?
First of all, it is very small and 3kb (gzip) is very suitable for use on the mobile page (because there is a requirement for size).
Secondly, Anix directly uses native css animation properties, which is very high performance.
Good compatibility, after a lot of real machine tests, good performance. Includes a variety of android devices
//like AniX.to
$(..).to(time: number, args: {ease?:string; delay?:number; [propName:string]:any;})
//like AniX.fromTo
$(..).fromTo(time: number, fromArgs: Object, toArgs: Object)
//like AniX.kill
$(..).kill(complete?: boolean)
//like AniX.get
$(..).getTransform(param: any)
//like AniX.ease
$.ease.easeOut
git clone git@github.com:aliaszz/AniX.git
npm install
npm run all
npm run jq
npm run umd
cd ./example
npm install
npm start
npm run build
Then open http://localhost:3000/
view the ./test/test.html
There are other versions here, of course, they are not necessary. React version and Vue version...
FAQs
Unknown package
The npm package anix receives a total of 192 weekly downloads. As such, anix popularity was classified as not popular.
We found that anix demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.