
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
common-land
Advanced tools
The idea of this package: It provides a socket.io layer that allows synchronized group interaction on a given website (events, chat, but also text input) By this means one can think of collaborative writing / programming / website demonstrations.
If you want to use it by embedding the files, you have to add the following files from the lib and css folder. You should alco incorporate the img folder.
<link rel="stylesheet" type="text/css" href="css/commonplace.css">
<script src="https://cdn.socket.io/socket.io-1.2.1.js"></script>
<script src="lib/SocketClient.js"></script>
<script src="lib/commonplace.js">
Creating an instance looks like this, explained below.
var params = {};
params.url = 'http://127.0.0.1:3333';
params.room = "admin";
var c = new common.Layer("logo", params);
To make us you have to start the socket.io server, that you find in the sever foilder (see below)
npm install common-land
To require the library, you write:
var common = require("node_modules/common-land/server/commonland_server.js");
To start an instance, you may pass an http server as an argument or leave the parameter empty. Then the socket.io Server will be started on port 3333
var socket = new common.Server();
Client side, you create an index.js file that might look like this:
var $ = require("jquery");
var common = require("common-land");
$(document).ready(function(){
"use strict";
var params = {};
params.url = 'http://127.0.0.1:3333';
params.room = "admin";
var c = new common.Layer("logo", params);
});
the params.url takes the url and port information where the server is running
the params.room create the room that holds your users
the first parameter of the object holds the dom element on which contains the elements that shall be shared, the second the server parameters
FAQs
"A tool that allows socket.synchronized collaboration"
We found that common-land demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.