
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
coc-webview
Advanced tools
Webview panel ported to coc.nvim
:CocInstall coc-webview
:CocList webview
Install the coc-webview to devDependencies
// import only type
import type { WebviewAPI, WebviewPanel } from 'coc-webview';
// fetch API
let webviewExt: Extension<WebviewAPI> | undefined;
const getWebviewAPI = () => {
if (!webviewExt) {
webviewExt = extensions.all.find((ext) => ext.id === 'coc-webview') as Extension<WebviewAPI> | undefined;
}
if (!webviewExt) {
const hint = 'Please install the coc-webview extension';
void window.showErrorMessage(hint);
throw new Error(hint);
}
return webviewExt.exports;
};
// create webview panel
export async function example(): Promise<void> {
const panel = await getWebviewAPI().createWebviewPanel(
// viewType
'markdown-preview-enhanced',
// title
`Preview markdown`,
{
// open in browser
openURL: true,
// route name
routeName: 'markdown-preview-enhanced',
},
{
localResourceRoots: [...],
enableScripts: true,
}
);
// update title
panel.title = 'Preview markdown-2'
// update html
panel.webview.html = '<html>...</html>'
// postMessage
panel.webview.postMessage({type: 'command', 'token': 'xxx'})
this.onDidReceiveMessage((msg: {type: string, token: string}) => {
// msg.type
});
cosnt util = getWebviewAPI().util;
util.openUri('https://domain.com/');
}
Usage: https://github.com/neoclide/coc.nvim/wiki/Using-the-configuration-file
webview.debug
: Enable debug modewebview.colorStrategy
: Color strategy for webviewwebview.primaryColors
: Primary colors for webviewwebview.minPort
: Mix port for webview servicewebview.maxPort
: Max port for webview servicewebview.openCommand
: Command template for open webview, arguments(%u webview url), example: chrome "%u"
MIT
This extension is built with create-coc-extension
FAQs
Vscode webview ported to coc.nvim
The npm package coc-webview receives a total of 226 weekly downloads. As such, coc-webview popularity was classified as not popular.
We found that coc-webview demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.