Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
colonel-kurtz
Advanced tools
A block based content editor powered by React. Colonel Kurtz provides a front-end for building pages as a series of blocks, serializing to a JSON data structure.
Colonel Kurtz is a content editor written in React. It forces content to be broken up into individual types, such as a photo or chunk of text, and provides a user interface for managing those "blocks" of content, reordering them, and even nesting them inside other content.
Comprehensive documentation can be found under the ./docs
directory
of this repo. However the content that follows should provide a high
level overview:
Colonel Kurtz can be serialized down to JSON. This structure looks like:
[
{
"blocks": [],
"content": {
"html": "<p>This is introductory text.<br></p>",
"text": "This is introductory text."
},
"type": "medium"
},
{
"blocks": [
{
"blocks": [],
"content": {
"src": "http://fizbuz.com/image.jpg"
},
"type": "image"
},
{
"blocks": [],
"content": {
"html": "<p>Sweet, sweet content.<br></p>",
"text": "Sweet, sweet content."
},
"type": "medium"
}
],
"type": "section"
},
{
"blocks": [],
"content": {
"html": "<p>This is footer text.<br></p>",
"text": "This is footer text."
},
"type": "medium"
}
]
A block has three important pieces of information:
More thorough documentation can be found at
./docs/colonel.md
however at a high level, Colonel Kurtz is installed with code loosely following:
var ColonelKurtz = require('colonel-kurtz');
var container = document.querySelector("#container")
var input = document.querySelector("#input")
var editor = new ColonelKurtz({
el : container,
blocks : JSON.parse(input.value),
blockTypes : [{
id: 'a-block',
label: 'This is a block',
component: require('./path/to/react/component')
}]
});
2.16.1
FAQs
A block editor
The npm package colonel-kurtz receives a total of 28 weekly downloads. As such, colonel-kurtz popularity was classified as not popular.
We found that colonel-kurtz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.