
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
Attach elements onto their target
npm install bullseye --save
bower install bullseye --save
bullseye(el, target?, options?)Position el according to the current position of target. In order to play well with friends, bullseye won't change the position CSS property, but instead leaves it up to you to set the appropriate position value on el. This way, we don't make it hard for you to set a different position value when you need to.
| Option | Description |
|---|---|
caret | When true, the tracked position will be right below the text selection caret instead of below the entire target element |
tracking | When not false, window resize events will update the position for el |
autoupdateToCaret | Set to false if you don't want automatic position updates when caret is set to true |
context | Set to a DOM element if you want height readings to be relative to that element plus its height |
When you call bullseye(el, target?, options?), you'll get back a tiny API to interact with the instance.
If target isn't provided, it'll match el. Bullseye supports operator overloading.
bullseye(el)
bullseye(el, options)
bullseye(el, target)
bullseye(el, target, options)
.refresh()Refreshes position of el according to the current position of target.
.read()Returns the current position in { x, y } format. Note that these values will be slightly modified in .refresh(), so it's not 100% 1-to-1.
.sleep()When caret is true, it becomes computationally expensive to figure out the position whenever a key is pressed. For that reason, you can put bullseye to sleep on blur events and wake it up on focus, calling .refresh(). This isn't done automatically for you to give you finer-grained control.
.destroy()Removes the resize event listener. Note that further calls to .refresh will throw exceptions.
MIT
FAQs
Attach elements onto their target
We found that bullseye demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.