Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
apostrophe-area-structure
Advanced tools
This module adds a Page Area Structure
menu item to your Page Settings menu that unspools the current page's DOM for all areas and their widgets (and those widget's areas and their widgets, etc) and nests them in a way that makes it simple to see their structure, without widget players/CSS obscuring them.
The menu displays the area's name
(key the area is stored in on the document) as well as what the parent document's title/slug.
From this menu you can delete a widget (which will delete all of its child areas, etc., just as it would if you clicked the delete button for that widget on the page).
You can also edit a widget. This will close the Page Area Structure dialog box and scroll to the widget, before activating the appropriate editor dialog box or in the case of rich text, triggering a click to initiate the on-page editor.
In your Apostrophe project:
npm i apostrophe-area-structure
app.js
const apos = require('apostrophe')({
shortName: 'my-project',
modules: {
// ... other configuration
'apostrophe-area-structure': {}
}
});
1.1.1 2020-08-26
edit: false
caused a situation where the area structure modal would not function properly. In addition, areas appearing twice on the page confused the module. These issues have been fixed.workflowModified
property is now set to true when this module modifies an area..gitignore
and deletes it.FAQs
### A tool for visualizing a page's area structure
The npm package apostrophe-area-structure receives a total of 0 weekly downloads. As such, apostrophe-area-structure popularity was classified as not popular.
We found that apostrophe-area-structure demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.