
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
轻量的网页切图设计稿对比工具
<script src="./index.js"></script>
<script>
// 第一个参数:图片对象 | URL网址
// 第二个参数:可选,object{w:切稿宽度,h:切稿高度}
// 使用图片对比,创建方法一
let img = new Image();
img.src = './cut.png';
new LiveCut('./cut.png');
// 使用图片对比,创建方法二
LiveCut.img('./华硕无双_作业_效果图示例.png');
// 使用网址最对比,创建方法一
// url模式创建对比,第二个参数必须填写,获取网址的大小,可以打开目标网址控制台,
// 输入:`{w:document.body.scrollWidth,h:document.body.scrollHeight}`,复制结果填入
new LiveCut('https://bing.com/', {w: 1920, h: 1000});
// 使用网址最对比,创建方法二
LiveCut.iframe('https://bing.com/', {w: 1920, h: 1000});
// 网页复刻,4361指定网站高度
LiveCut.reprint('https://lol.qq.com/main.shtml', 4361)
</script>
FAQs
Real time design drawing comparison web tool.
We found that livecut demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.