
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
literallycanvas
Advanced tools
Literally Canvas is an extensible, open source (BSD-licensed), HTML5 drawing widget. Its only dependency is React.js.
Get help on our mailing list by sending an email to literallycanvas+subscribe@googlegroups.com or by visiting Google Groups.
Along with the CSS, JS, and image assets, this is all it takes:
<div class="my-drawing"></div>
<script>
LC.init(document.getElementsByClassName('my-drawing')[0]);
</script>
No one is maintaining this project. If you report a bug, the ticket will be a helpful place for discussion, but no one will fix it unless you submit a pull request. Feature requests will likewise be ignored.
Pull requests will be merged promptly if they are basically OK.
Setup: npm install --dev
Watching and serving: gulp dev
Browse to localhost:8080/demo and modify demo/index.html to test code
in progress.
To generate a production-ready .js file, run gulp and pull out either
lib/js/literallycanvas.js or lib/js/literallycanvas.min.js.
FAQs
HTML5 drawing widget
We found that literallycanvas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.