
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Simple Web Component Library for creating custom HTML Components.
Converted object references to Drow and drow internal elements instead of DrowJS
Include the drow.js in an html file:
<script src="drow.js"></script>
Or as an NPM Module
import Drow from 'drow';
Define a Drow Object to setup a componet:
Component needs to have a
HTML
<my-comp prop1="AAA" prop2="BBB"> </my-comp>
JavaScript
var config = {
"name" : "my-comp",
"props": ['prop1','prop2'],
"template": `<div>
<div>Every time you click on timestamp it will update the time.</div>
<b>Click for the timestamp</b><div>{{prop1}}</div>
</div>`,
"init" : function(config) {
let prop1 = this.getProp('prop1') ? this.getAttribute('prop1') : "";
//in the init this.getComp() is used to obtain the component
this.getComp().addEventListener('click', e => {
this.getComp().querySelector("b").innerHTML = new Date();
});
},
watch : function(attribute) {
if (attribute.name == 'name') { //in the watch this.comp is a reference to this component
attribute.comp.querySelector('b').innerHTML = `Hello, ${attribute.newValue}`;
}
}
}
DrowJS.register(config);
//Define Component
<my-comp title="Great Name" link="https://something.com">
<!--
Web Components must be in primary-secondary name separated by dash ie my-comp
Componets and other HTML elements in the comp will be automatically added to the {{bind}} of the components template.
-->
</my-comp>
//Template for Component
template = `<div>
<div>Title: {{title}}</div>
<div>Link: {{link}}</div>
</div>`
//Component Config
var myComp = {
"name" : "my-comp",
"props": ['title','link'],
"template": template,
"init" : function(config) { //optional init
},
watch : function(attribute) { //optional watch -- hooks/useEffect
}
}
//Register Component
DrowJS.register(myComp); //using the config created earlier
Basic Example:
First install dependencies:
npm install
Run commands:
npm run server
Author johnfacey.dev
Twitter twitter.com/johnfacey
FAQs
Web Component Wrapper for creating custom HTML Components.
We found that drowjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.