Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
ember-cropperjs
Advanced tools
This addon provides a wrapper around Cropper.js as well as two yielded components for handling events and programatically calling methods on the cropper instance.
ember install ember-cropperjs
{{! app/templates/application.hbs }}
<ImageCropper
@source="sinbad2_800x600.jpg"
@options={{hash aspectRatio=1 viewMode=2}}
as |cropper|
>
<cropper.on @event="crop" @action={{this.crop}} />
</ImageCropper>
// app/controllers/application.ts
import Controller from '@ember/controller';
import { debounce } from '@ember/runloop';
import { action } from '@ember/object';
export default class ApplicationController extends Controller {
_updateFileBlob(cropper) {
return cropper
.getCroppedCanvas({
// any additional options
maxWidth: 512,
maxHeight: 512,
})
.toBlob((blob) => {
// do something with the blob:
// common examples include `blob.readAsDataURL()` or `blob.readAsArrayBuffer()`
});
}
@action crop(cropper) {
// debounce is optional
debounce(this, this._updateFileBlob, cropper, 100);
}
}
Note: Any options available from Cropper.js are available to be passed in to the options hash. There seems to be an issue with Cropper processing Ember's Empty Object, so the components/image-cropper.js
file copies the options object as a work around.
git clone <repository-url>
cd my-addon
yarn
yarn run lint:js
yarn run lint:js -- --fix
ember test
– Runs the test suite on the current Ember versionember test --server
– Runs the test suite in "watch mode"ember try:each
– Runs the test suite against multiple Ember versionsember serve
For more information on using ember-cli, visit https://ember-cli.com/.
This project is licensed under the MIT License.
FAQs
Ember wrapper around vanilla cropperjs
The npm package ember-cropperjs receives a total of 206 weekly downloads. As such, ember-cropperjs popularity was classified as not popular.
We found that ember-cropperjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.