Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Olli is a library for converting web visualizations into accessible text structures for blind and low-vision screen reader users.
Olli is an open-source library for converting data visualizations into accessible text structures for screen reader users. Starting with an existing visualization specification created with a supported toolkit, Olli produces a keyboard-navigable tree view with descriptions at varying levels of detail. Users can explore these structures both to get an initial overview, and to dive into the data in more detail.
For more information about Olli, see the main project repo at https://github.com/mitvis/olli.
This is Olli's core package, published on npm
as olli
.
The src/Structure
folder constructs a tree structure from a given OlliVisSpec
. This code also assigns descriptions to each node in the tree.
Like sighted users, research has found that screen reader users also follow an information seeking strategy of “overview first, zoom and filter, and details on demand”. Following prior work on design dimensions for rich screen reader visualization experiences, we represent accessible visualizations hierarchically, as a tree structure containing descriptions at varying levels of information granularity. The root node contains a high-level overview of the visualization. If the visualization has multiple views, the level below the root contains a node for each view. The next level contains nodes rep- resenting guides (axes and legends). Each guide node has children representing intervals and categories for continuous and discrete guides, respectively. Finally, the leaves of the tree contains the indi- vidual data points that correspond to those intervals and categories. The tree allows users to leverage a visualization’s hierarchical struc- ture to drill down into data, rather than being restricted to reading individual data points linearly or in a table.
Olli uses an OlliVisSpec returned by an adapter to construct a tree
of AccessibilityTreeNode
s. Each AccessibilityTreeNode
contains a reference to its parent node (null in the case of the root
node), and a list of child nodes. It also contains a information about
what part of the visualization it represents, and a textual description
to be read by a screen reader. For example, a node representing an x-
axis might have a text description reading, “X-Axis for a quantitative
scale with values from 14.43 to 34.7”.
The AccessibilityTreeNode
type is defined here: https://github.com/mitvis/olli/blob/main/packages/core/src/Structure/Types.ts
The src/Render
folder includes screen-reader-friendly renderers for a tree view and a table.
Olli renders an accessible structure by traversing the tree and out-
putting HTML elements and necessary ARIA attributes. To imple-
ment an accessible HTML tree view, we adapted an example from
the W3C’s WAI-ARIA Authoring Examples documentation. As
the AccessibilityTreeNode is traversed, tree nodes that have
children are rendered as a nested unordered list with a group role
and aria-expanded attribute. Otherwise, a node is rendered as a
list item with a treeitem
ARIA role. The addition of the ARIA
roles and extra attributes allow the screen reader to provide a more
specific description of the node’s position of the tree.
FAQs
Olli is a library for converting web visualizations into accessible text structures for blind and low-vision screen reader users.
The npm package olli receives a total of 4 weekly downloads. As such, olli popularity was classified as not popular.
We found that olli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.