
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
A jQuery plugin for consuming Google Docs via JSON
Download the production version or the development version.
Create a Google Docs document, using the "Heading 1" format to denote sections of the document. Publish it to the web via File->Publish to the web->Publish.
In your web page:
<script src="jquery.js"></script>
<script src="dist/doctop.min.js"></script>
<script>
$.doctop({
url: 'https://docs.google.com/document/d/1_zs07o2m1BQisqWT5WEk_aC4TFl9nIZgufc9IYeL64Y/pub',
callback: function(d){console.dir(d);},
});
</script>
Returns:
{
"copy": {
"h1-1": [
"This is a paragraph of text",
"this is another paragraph",
"h2-1" [
"this should be a child of h2-1, which should be a child of h1-1",
"h3-1": [
"This should be a child of h3-1, which should be a child of h2-1"
]
]
],
"h1-2": [
"This should be a child of h1-2, which itself should be in the top level of the object.",
"h3-2": [
"This should be a child of h3-2, which should be a child of h1-2"
]
],
"h1-3": [
"This should be a child of h1-3",
"Another child of h1-3"
]
}
}
### Options
The full URL of a published Google Doc. In Google Docs, go "File->Publish to the Web->Publish" to get this URL.
Asynchronous callback for the data. Takes one argument, the response, containing copy and any Tabletop data.
The this context is the contents of response.copy.
undefined)If you have Tabletop.js included on the page, you can supply a published Google Sheets URL
in order to only need one callback. The Tabletop response will be in the "data" key of the returned object,
i.e, spreadsheet data in data.data, Tabletop object in data.tabletop.
undefined)If you're using Tabletop with Doctop, you can specify the Tabletop proxy here. Note this only works for Google Sheets that have been copied to S3 or elsewhere; Doctop proxy support is still forthcoming.
false)Use Tabletop's "simpleSheet" method when grabbing that data. This only really works if you only have one sheet.
false)Instead of creating keys for the sections that are the slugified version of the H1 text,
return keys in the format section_0 — this may be desirable if you have journalists
who enjoy arbitrarily changing the H1 text on you!
true)This will attempt to preserve text formatting from Google Docs. It will yield messier
output because Google Docs loves to wrap everything under the sun in a <span> tag.
Defaults to false.
false)This returns non-H1 elements as jQuery objects instead of either HTML or text.
(Coming soon)
preserveFormatting option and tests; removes returnJquery.FAQs
Doctop
The npm package doctop receives a total of 3 weekly downloads. As such, doctop popularity was classified as not popular.
We found that doctop demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.