Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
bit-docs-html-toc
Advanced tools
A table of contents for use with bit-docs-generate-html.
To use, add bit-docs-html-toc to your bit-docs dependencies in package.json:
{
...
"bit-docs": {
"dependencies": {
"bit-docs-html-toc": "$VERSION"
}
}
}
Where $VERSION
is the latest version on npm.
In your template add a <bit-toc>
element:
<bit-toc></bit-toc>
<bit-toc>
supports the following attributes:
By default, all heading tags children of the first article
tag on the page will
be collected to create the table of contents; if you want to use a different element
just do:
<bit-toc
heading-container-selector="#my-custom-selector"
>
</bit-toc>
The table of contents will be injected into this element at run time.
By default, only h2
elements are collected. You
can change to include <h3>
elements by setting depth like:
<bit-toc depth="2"></bit-toc>
Alternatively, the number of child headers that will be included in the TOC, use the
@outline
tag like so:
@outline 2
If you want <li>
's to be within an <ol>
instead of a <ul>
, this
can be configured like:
<bit-toc child-tag="ol"></bit-toc>
If present, will scroll the <bit-toc>
element with the heading-container-selector
:
<bit-toc scroll-selector></bit-toc>
scroll-selector
can also be set to some other element to scroll:
<bit-toc scroll-selector="#some-parent"></bit-toc>
Call .highlight()
to force an update of the active
or completed
class names on the <li>
elements:
document.querySelector("bit-toc").highlight()
This happens automatically when the heading-container-selector
element is scrolled.
FAQs
table of contents bit-docs plugin
The npm package bit-docs-html-toc receives a total of 35 weekly downloads. As such, bit-docs-html-toc popularity was classified as not popular.
We found that bit-docs-html-toc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.