
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
colorsheet is a small library containing several functions for converting between color formats and calculating things like contrast and luminance.
usage:
npm i colorsheet
then (example):
const colorsheet = require('colorsheet')
const emerald = colorsheet.hexToRGBA("#50c878")
// returns {r: 80, g: 200, b: 120}
here's what it exposes:
const colorsheet = {
shiftHue: shiftHue,
hexToRGBA: hexToRGBA,
calculateLuminance: calculateLuminance,
hslToRGB: hslToRGB,
rgbToHSL: rgbToHSL,
rgbToNHSL: rgbToNHSL,
rgbToHex: rgbToHex,
getWcagLevels: getWcagLevels,
getContrastRatio: getContrastRatio
};
number
calculateLuminance - color to calculate the luminance of an rgb color
object
hexToRGBA - converts hex colors to rgb(a) colors
string
rgbToHex - converts rgb color to hex color
object
hslToRGB - convert hsl color to rgb
object
rgbToHSL - convert rgb color to hsl color
object
rgbToNHSL - rgb to number hsl - hsl with decimal / integer values instead of typical hsl notation
object
shiftHue - shifts the hue value of an rgb color
object
getContrastRatio - get the contrast rati between two colors
number
calculateLuminance - color to calculate the luminance of an rgb color
kind: global function
returns: number
- luminance
param | type | description |
---|---|---|
r | number | color red from 0-255 |
g | number | color green from 0-255 |
b | number | color blue from 0-255 |
object
hexToRGBA - converts hex colors to rgb(a) colors
kind: global function
returns: object
- rgb object with r, g, b and optionally a keys
param | type | description |
---|---|---|
hex | string | hex color value as a string |
string
rgbToHex - converts rgb color to hex color
kind: global function
returns: string
- string representing a hex color
param | type | description |
---|---|---|
r | number | red color number |
g | number | green color number |
b | number | blue color number |
object
hslToRGB - convert hsl color to rgb
kind: global function
returns: object
- rgb object with red, green, and blue keys
param | type | description |
---|---|---|
h | number | hue number |
s | number | saturation number |
l | number | lightness number |
object
rgbToHSL - convert rgb color to hsl color
kind: global function
returns: object
- object with h, s, and l keys
param | type | description |
---|---|---|
r | number | red color number |
g | number | green color number |
b | number | blue color number |
object
rgbToNHSL - rgb to number hsl - hsl with decimal / integer values instead of typical hsl notation
kind: global function
returns: object
- object containing hue, saturation, and lightness values
param | type | description |
---|---|---|
r | number | color red from 0-255 |
g | number | color green from 0-255 |
b | number | color blue from 0-255 |
object
shiftHue - shifts the hue value of an rgb color
kind: global function
returns: object
- rgb object with red, green, and blue keys
param | type | description |
---|---|---|
rgb | object | object with red, green, and blue keys |
deg | number | amount to shift the hue of the color |
object
getContrastRatio - get the contrast rati between two colors
kind: global function
returns: object
- contrast ratio object with contrast ratio represented as a string and a decimal
param | type | description |
---|---|---|
hex1 | string | first hex value for contrast calculation |
hex2 | string | second hex value for contrast calculation |
FAQs
various useful color conversion and utility functions
The npm package colorsheet receives a total of 6 weekly downloads. As such, colorsheet popularity was classified as not popular.
We found that colorsheet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.