
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Axe rules to check against APCA bronze and silver+ conformance levels.
This package contains custom axe rules and checks for APCA Bronze and Silver+ conformance levels.
npm install --save-dev axe-core apca-check
import axe from "axe-core";
import { registerAPCACheck } from 'apca-check';
registerAPCACheck('bronze'); // or registerAPCACheck('silver');
// consider turning off default WCAG 2.2 AA color contrast rules when using APCA
axe.configure({
rules: [{ id: "color-contrast", enabled: false }]
})
axe.run(document, (err, results) => {
if (err) throw err;
console.log(results);
});
To set custom thresholds for APCA checks, follow these steps:
custom
as the first argument when calling registerAPCACheck
.fontSize
and fontWeight
arguments.const customConformanceThresholdFn = (fontSize, fontWeight) => {
const size = parseFloat(fontSize);
const weight = parseFloat(fontWeight);
return size >= 32 || weight > 700 ? 45 : 60;
};
registerAPCACheck('custom', customConformanceThresholdFn);
To run eslint (including prettier as a formatter) you can run
npm run lint
To have eslint fix any autofixable issue run
npm run lint:fix
Tests are run by web-test-runner in combination with playwright against chromium, firefox and webkit
npm run test
For watch mode
npm run test:watch
We use changesets to automatize the steps necessary to publish to NPM, create GH releases and a changelog.
npx chageset
and follow the instrcutions on screen. (changes that do not require a new release - e.g. changing a test file - don't need a changeset).
chore(release)
see example) and continue updating it as more changesets are potentially pushed/merged to the main branch.chore(release)
PR back to main and the release github workflow will take care of publishing the changes to NPM and create a GH release for us. The chore(release)
PR also give us an opportunity to adjust the automatically generated changelog when necessary (the entry in the changelog file is also what will end up in the GH release notes).The release github workflow only run if the CI workflow (running linter, formatter and tests) is successful: CI is blocking accidental releases.
Despite using changesets to communicate the intent of creating releases in a more explicit way, we still follow conventional commits standards for keeping our git history easily parseable by the human eye.
Copyright 2023 Stack Exchange, Inc and released under the MIT License.
axe-core®
and axe®
are a trademark of Deque Systems, Inc. in the US and other countries.
FAQs
Axe rules to check against APCA bronze and silver+ conformance levels.
The npm package apca-check receives a total of 1,230 weekly downloads. As such, apca-check popularity was classified as popular.
We found that apca-check demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.