
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
chartjs-plugin-draggable
Advanced tools
A plugin for Chart.js >= 2.4.0
Makes elements such as annotations movable via drag and drop.
To make an element draggable, simply add the following options to the element's config section.
{
...
draggable: true,
onDragStart: function(event) {
},
onDrag: function(event) {
},
onDragEnd: function(event) {
}
}
Requires chartjs-plugin-annotation.js >= 0.3.0.
Line annotations are supported:
var options = {
...
annotation: {
annotations: [
{
type: 'line',
mode: 'horizontal',
scaleID: 'y-axis-0',
value: 25,
draggable: true,
onDrag: function(event) {
console.log(event.subject.config.value);
}
}
]
}
};
The following features still need to be done:
To install via npm:
npm install chartjs-plugin-annotation --save
Or, download a release archive file from the releases page.
Before submitting an issue or a pull request to the project, please take a moment to look over the contributing guidelines first.
chartjs-plugin-draggable.js is available under the MIT license.
FAQs
Draggable element plugin for Chart.js
The npm package chartjs-plugin-draggable receives a total of 1,011 weekly downloads. As such, chartjs-plugin-draggable popularity was classified as popular.
We found that chartjs-plugin-draggable demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.

Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.

Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.