
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
openui5-parallax
Advanced tools
A library wrapping parallax.js in UI5 controls to create stunning layered effects
A library wrapping parallax.js in UI5 controls to create stunning layered effects, for more information check out the parallax.js demo. The UI5Lab-browser is loaded as a dependency to display the library content for testing during development.
git clone https://github.com/michadelic/openui5-parallax
cd openui5-parallax
npm install
Gruntfile.js
to see all the tasks).npm start
Browser A sample browser showcasing artifacts from one or more libraries
Test page An HTML test page instantiating the control
Instructions how to connect to the community and contribute to the UI5lab project can be found in the main repository!
Thank you to @wagerfield for this great parallax implementation!
FAQs
A library wrapping parallax.js in UI5 controls to create stunning layered effects
We found that openui5-parallax demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.