Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
async-assets
Advanced tools
A simple, lightweight JavaScript API for asynchronous including assets.
⚡️ Asynchronous loading of styles and scripts without blocking rendering on the page. You can achieve significant growth with Google PageSpeed Insights.
There are few options on how to include/import package into your project:
You can install package from NPM
$ npm install async-assets -D
Promise based API
import AsyncAssets from 'async-assets'
try {
const assets = await AsyncAssets('...')
// do something
} catch (err) {
console.log('Something wrong', err)
}
Callback API (for backward compatibility)
import AsyncAssets from 'async-assets'
AsyncAssets('...', (err) => {
if (err) throw 'Something wrong'
console.log('success')
})
If you don't want to include package files in your project, you may use it from CDN. The following files are available:
<script src="https://unpkg.com/async-assets/bundle.js"></script>
<!-- or -->
<script src="https://unpkg.com/async-assets/bundle.min.js"></script>
<script>
try {
const assets = await AsyncAssets('...')
// do something
} catch (err) {
console.log('Something wrong', err)
}
</script>
If you want to use package locally, you can directly download them from https://unpkg.com/async-assets/
Docs coming soon...
MIT - Copyright (c) 2021-present
developed by azabroflovski 🍬
FAQs
Async loading of css and javascript files
We found that async-assets demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.