
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
citeproc-plus
Advanced tools
citeproc-plus
incorporates 2000+ styles and 50+ locale files from the Citation Style Language project, as well as citeproc-js, the JavaScript CSL processor library by Frank Bennett.
This is an early version so be aware that the API may change. You can try a demo at https://fiduswriter.github.io/citeproc-plus/.
This package is meant for those who want to use citeproc-js, but don't want to have to deal with retrieving and storing citation styles and localizations from other places on the web.
Install it from npm together with your other dependencies:
npm install citeproc-plus --save
Install a plugin for your bundler to handle resources other than JavaScript files as separate files, for example Webpack's File Loader. Configure it so that it handles files with the ending .csljson
. In the case of Webpack's File Loader, that would be a webpack.config.js with setting such as:
module.exports = {
mode: "production",
output: {
publicPath: "dist/",
},
module: {
rules: [
{
test: /\.(csljson)$/i,
use: [
{
loader: 'file-loader',
},
],
},
],
},
};
CSL
and styles
in your app:import {CSL, styles} from "citeproc-plus"
styles
is a dictionary of all the available styles with their title
and styleId
. To create an ordered list of all available styles, do:dom.innerHTML =
`<select>${
Object.entries(styles).map(
([key, value]) => `<option value="${key}">${value}</option>`
).join('')
}</select>`
const citeproc = new CSL.Engine(sys, style, lang, forceLang)
Do instead:
const csl = new CSL()
const citeproc = await csl.getEngine(
sys, // required, same as for citeproc-js, but without the retrieveLocale method
styleId, // required, The id of the style to use
lang, // optional, same as for citeproc-js
forceLang // optional, same as for citeproc-js
)
or if you prefer the then()
-function, do:
const csl = new CSL()
let citeproc
csl.getEngine(
sys, // required, same as for citeproc-js, but without the retrieveLocale method
styleId, // required, The id of the style to use
lang, // optional, same as for citeproc-js
forceLang // optional, same as for citeproc-js
).then(
engine => citeproc = engine
)
Notice that you only need one CSL instance with which you can create any number of citeproc instances with different styles, languages and sys objects connected to them. Notice also that the method to get an engine is asynchronous as it potentially has to download files from your static files storage.
There is an extra style with the styleId jats
that can be used as part of conversion packages. This style is not listed among the list of styles as it is not meant for human consumption.
If instead of the styleId you hand it a preprocessed style object it will use it as well without caching.
Notice that the styles in this package are not stored in the citation style language (CSL) directly. There is a tool to convert CSL to the JSON of preprocessed style object that is needed here.
FAQs
Citeproc-js + citation styles bundled
The npm package citeproc-plus receives a total of 39 weekly downloads. As such, citeproc-plus popularity was classified as not popular.
We found that citeproc-plus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.