
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
desktop-notifications
Advanced tools
A simple and opinionated library for handling Windows notifications
Note: This is currently in preview, with support for features that GitHub Desktop uses.
$ npm install --save desktop-notifications
# or
$ yarn add desktop-notifications
The current set of options for interacting with notifications, especially on Windows, have some limitations that meant we couldn't use them easily in GitHub Desktop:
electron
doesn't support Windows
notifications when those are hidden away in the Action Center, because it
doesn't have a COM activator that could leverage CLSID-based activation. More
details about this can be found in
electron/electron#29461.node-notifier
relies on
snoretoast
to handle notifications on
Windows, and the way it's used is only able to detect one event with each
notification, and also requires the app to use the same CLSID that is
hardcoded
in snoretoast.electron-windows-notifications
has many dependencies around NodeRT
which, as of today, also require some
manual steps in order to build
them.After exploring all these options, we decided to write our own library to do the stuff we require using no dependencies at all and having all the features we need.
In order to get the sample app up and running you need to:
desktop-notifications
.These are the commands to make that happen:
$ yarn install
$ yarn build
$ cd sample-app
$ yarn install
$ yarn build
$ /usr/bin/codesign --deep --force --sign - --timestamp\=none node_modules/electron/dist/Electron.app/Contents/MacOS/Electron # macOS only
$ yarn start
See the documentation under the
docs
folder.
Each release of desktop-notifications
includes prebuilt binaries based on
N-API, with support for different versions
of Node and Electron. Please refer to the
N-API version matrix
and the release documentation for Node and
Electron to see what is
supported currently.
Read the Setup section to ensure your development environment is setup for what you need.
This project isn't about implementing a 1-1 replication of any other notifications API, but implementing just enough for whatever usage GitHub Desktop needs.
If you want to see something supported, open an issue to start a discussion about it.
FAQs
A simple and opinionated library for handling Windows notifications
The npm package desktop-notifications receives a total of 295 weekly downloads. As such, desktop-notifications popularity was classified as not popular.
We found that desktop-notifications demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.