
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
markerjs-live
Advanced tools
marker.js Live is a JavaScript library for overlaying dynamic interactive annotations on top of images.
marker.js Live is a companion library for marker.js 2. While marker.js 2 enables users to annotate images it produces both a static representation of the annotated image as well as a configuration dataset for future editing of the annotations. marker.js Live takes that configuration and displays it dynamically on top of original (untouched) images. This enables responsiveness, interactivity, and other use-cases beyond what static annotations could ever offer.
marker.js Live is extensible and enables you to pick and choose the plugins to add just the functionality you need for your project.
npm install markerjs-live
or
yarn add markerjs-live
To display dynamic image annotations in your project, first, annotate your images using marker.js 2, grab the "state" configuration of the annotations, and then follow these 2 easy steps:
mjslive.MarkerView
passing a target image reference to the constructor.show()
method passing your annotation configuration (marker.js 2 state) to it.That's it!
Here's a simple example:
// skip this line if you are importing marker.js Live into the global space via the script tag
import * as mjslive from 'markerjs-live';
// create an instance of MarkerView and pass the target image reference as a parameter
const markerView = new mjslive.MarkerView(target);
// call the show() method and pass your annotation configuration (created with marker.js 2) as a parameter
markerView.show(markerState);
Obviously, there's much more marker.js Live can do: use the range of events to add your own custom functionality based on lifecycle and interactions, or just utilize the pre-made plugins to extend the core features, or create your own plugins and share them with the community.
For these and other uses please refer to the marker.js Live documentation.
Check out marker.js Live demos for various usage examples.
For a more detailed "Getting started" and other docs and tutorials, please refer to the official documentation.
Linkware (see LICENSE for details) - the UI displays a small link back to the marker.js website which should be retained.
Alternative licenses are available through the marker.js website.
[1.2.1] - 2023-09-30
FAQs
Live player for image annotations created with marker.js 2
The npm package markerjs-live receives a total of 554 weekly downloads. As such, markerjs-live popularity was classified as not popular.
We found that markerjs-live demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.