Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
caniuse-component
Advanced tools
Instant, up-to-date, and theme-able browser statistics for your presentations (so you don't have to update your slides the night before!)
Install via NPM: npm install caniuse-component
-- include the js and css source.
To use this with Reveal.js, npm install, then apply this source as a plugin:
Reveal.initialize({
// setup things here:
// ...
// plugins here:
dependencies: [
{ src: '../node_modules/caniuse-component/scripts.js', async: true },
{ src: '../node_modules/caniuse-component/styles.css' }
]
});
Then, include this element on your page:
<ul id="caniuse--result-list"
data-propName="css-filters"
data-browsers="opera safari firefox chrome edge">
</ul>
name | function | usage | options |
---|---|---|---|
id | Applies styles to list | id="caniuse--result-list" | You only get one option unless you make your own |
propName | CSS Property Name | data-propName="css-filters" | See Caniuse API and options |
browsers | Browsers to check support from | data-browsers="firefox chrome safari" | edge , chrome , safari , ie , firefox , opera |
NPM scripts are used as the build system, so to develop, run: npm run dev
. Consumable files are distributed in the root, and source files live within /src
.
To contribute: Please clone this down and submit a PR, or open an issue. 😘
FAQs
Up-to-date caniuse.com data for your slides
The npm package caniuse-component receives a total of 0 weekly downloads. As such, caniuse-component popularity was classified as not popular.
We found that caniuse-component demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.