
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
Simple, free, draggable solution with throw-a-bility
These are the default options drago comes configured with (you can override these).
const defaultOpts = {
accel: { x: -0.001, y: -0.001 }, // acceleration
vMax: { x: 80, y: 80 }, // maximum velocity values (for positive throws)
vMin: { x: -80, y: -80 }, // minimum velocity values (for negative throws)
drag: { x: 0.95, y: 0.85 }, // mess with these to get smoother / rougher throws
axis: { x: true, y: true }, // Toggle these to lock draggability to one axis
restrict: { x: 'opposite', y: 'contain' }, // type of container restriction
};
Types of restrict:
opposite // Currently lets you throw so that only 25% is viewable at the min , max.
contain // Keep the draggable item inside container
none // Let it be free. Probably not useful
const $container = document.querySelector('.js-drag-container');
const $content = $container.querySelector('.js-drag-content');
const instance = new Drago($content, $container, {
axis: { x: false, y: true }
drag: { x: 0.95, y: 0.5 },
// ...etc
} )
To stop the RAF / Draggability of drago:
instance.kill();
FAQs
Simple, free, draggable solution with throw-a-bility
We found that drago demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.