
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
notification-util
Advanced tools
Very simple notification system for JS/TS projects.
npm i notification-util
Only has to be called once, before using the Notification or Loader class.
import {
Notification,
Loader,
configureNotifications
} from 'notification-util';
configureNotification({}); // Required, but can be empty
You must run configureNotification before using the Notification or Loader class.
To run without customization, pass an empty object as argument.
You can override any of default settings by following the structure below.

| Option | Description |
|---|---|
| containerSelector | Selector for notification container. Attribute, ID, class as string with # or . as needed |
| classes | Override the default CSS classes by providing your own |
| → notificationClass | CSS class as string, no prefixed . |
| → headingWrapperClass | CSS class as string, no prefixed . |
| → iconClass | CSS class as string, no prefixed . |
| → messageClass | CSS class as string, no prefixed . |
| → headingClass | CSS class as string, no prefixed . |
| icons | Override the default icons by providing your own. |
| → success | string injected as HTML |
| → warning | string injected as HTML |
| → error | string injected as HTML |
| → debug | string injected as HTML |
| → loading | string injected as HTML |
| injectCss | boolean Inject default CSS. If disabling, be sure to provide your own animation CSS. |
configureNotification({
containerSelector: '[sn-notification-container]',
classes: {
notificationClass: 'sn_notification',
headingWrapperClass: 'sn_notification-heading-wrapper',
iconClass: 'sn_notification-icon',
messageClass: 'sn_notification-message',
headingClass: 'sn_notification-heading'
},
icons: {
success: icons.success,
warning: icons.warning,
error: icons.error,
debug: icons.debug,
loading: icons.loading
},
injectCss: false
});
growWidth is used for showing duration of notification, rotation is used in loading icon.
@keyframes growWidth {
from {
width: 0%;
}
to {
width: 100%;
}
}
@keyframes rotation {
0% {
transform: rotate(0deg);
}
100% {
transform: rotate(360deg);
}
}
Displays a notification with a heading and message. Can be closed by clicking on it when enabled.
Returns an object if you need to remove it programmatically. e.g.: myNotification.remove().
new Notification({
type: 'success' | 'warning' | 'error' | 'debug', // Required
heading: string, // Required
message: string,
duration: number | null, // Default: 3500 (ms), null for infinite
clickToClose: boolean // Default: true
});
import { Notification, configureNotifications } from 'notification-util';
configureNotification({}); // Required, but can be empty
new Notification({
type: 'success',
heading: 'Success heading',
message: 'Success message'
});
Displays a spinning loader with a heading and message. Returns an object with methods to update the loader and close it.
new Loader({
heading: string, // Required
message: string
});
import { Loader, configureNotifications } from 'notification-util';
configureNotification({}); // Required, but can be empty
const myLoaderMessage = new Loader({
heading: 'Loader heading',
message: 'Loader message'
});
// some time passes
myLoaderMessage.update({
heading: 'Updated heading',
message: 'Updated message'
});
// some time passes
myLoaderMessage.close();
FAQs
Very simple notification system for JS/TS projects.
The npm package notification-util receives a total of 1 weekly downloads. As such, notification-util popularity was classified as not popular.
We found that notification-util demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.