Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
citeproc-plus
Advanced tools
citeproc-plus
incorporates 2000+ styles and 50+ locale files from the Citation Style Language project, as well as citeproc-js, the JavaScript CSL processor library by Frank Bennett.
This is an early version so be aware that the API may change. You can try a demo at https://fiduswriter.github.io/citeproc-plus/.
This package is meant for those who want to use citeproc-js, but don't want to have to deal with retrieving and storing citation styles and localizations from other places on the web.
Install it from npm together with your other dependencies:
npm install citeproc-plus --save
Install a plugin for your bundler to handle resources other than JavaScript files as separate files, for example Webpack's File Loader. Configure it so that it handles files with the ending .csljson
. In the case of Webpack's File Loader, that would be a webpack.config.js with setting such as:
module.exports = {
mode: "production",
output: {
publicPath: "dist/",
},
module: {
rules: [
{
test: /\.(csljson)$/i,
use: [
{
loader: 'file-loader',
},
],
},
],
},
};
CSL
and styles
in your app:import {CSL} from "citeproc-plus"
const citeproc = new CSL.Engine(sys, style, lang, forceLang)
Do instead:
const csl = new CSL()
const citeproc = await csl.getEngine(
sys, // required, same as for citeproc-js, but without the retrieveLocale method
styleId, // required, The id of the style to use
lang, // optional, same as for citeproc-js
forceLang // optional, same as for citeproc-js
)
to create a selector of all available styles:
csl.getStyles().then(
styles => dom.innerHTML =
`<select>${
Object.entries(styles).map(
([key, value]) => `<option value="${key}">${value}</option>`
).join('')
}</select>`
)
or if you prefer the then()
-function, do:
const csl = new CSL()
let citeproc
csl.getEngine(
sys, // required, same as for citeproc-js, but without the retrieveLocale method
styleId, // required, The id of the style to use
lang, // optional, same as for citeproc-js
forceLang // optional, same as for citeproc-js
).then(
engine => citeproc = engine
)
Notice that you only need one CSL instance with which you can create any number of citeproc instances with different styles, languages and sys objects connected to them. Notice also that the method to get an engine is asynchronous as it potentially has to download files from your static files storage.
There is an extra style with the styleId jats
that can be used as part of conversion packages. This style is not listed among the list of styles as it is not meant for human consumption.
If instead of the styleId you hand it a preprocessed style object it will use it as well without caching.
Notice that the styles in this package are not stored in the citation style language (CSL) directly. There is a tool to convert CSL to the JSON of preprocessed style object that is needed here.
FAQs
Citeproc-js + citation styles bundled
We found that citeproc-plus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.