
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
overscrolled
Advanced tools
help you to escape from some browser's built-in "pull-to-refresh" feature or any other fancy behaviour when page is overscrolled
Description
Help you to escape from e.g. Chrome's built-in "pull-to-refresh" feature an potentially any other fancy features provided by browser's when page is over-scrolled at the top, where in certain scenario you simply don't want the page to be disturbed by those.
Google Chrome [reference https://docs.google.com/document/d/12Ay4s3NWake8Qd6xQeGiYimGJ_gCe0UMDZKwP9Ni4m8/] for how this works.
$ npm install --save overscrolled
var overscrolled = require('overscrolled');
overscrolled(window, [options])Description
window: The viewport's window object.options: Accepts following configurationsoptions.prevent_pullToRefresh: Prevent the "pull-to-refresh" behaviouroptions.prevent_overscrollGlow: Prevent the elastic bouncing/glow effect when page is over-scrolledhandler The handler object of this per overscrolled instance.handler.destroy To tear down and cleanup event listeners.npm run build - Build task that generates both minified and non-minified scripts;npm run test-server - Run Mocha tests once;npm run test-browser - Run Mocha tests in the browser using Karma once;npm run test - Shortcut for npm run test-server && npm run test-browser;npm run tdd - Run Mocha tests & watch files for changes;npm run tdd-browser - Run Karma (w/ Mocha) tests & watch files for changes;npm run coverage - Run Isparta, a code coverage tool;MIT © Garry Yao
FAQs
help you to escape from some browser's built-in "pull-to-refresh" feature or any other fancy behaviour when page is overscrolled
We found that overscrolled demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.