Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
phantomjs-shim
Advanced tools
Add shim for phantomjs
Require this module in phantomjs's and use browserify to recursively analyze all the require() calls in your app in order to build a bundle you can serve up to the browser in a single
// sandbox.js
require('@ali/phantomjs-shim')('#theme-style'); // '#theme-style' is specific `<style />` tag's selector in the HTML document
var bodyEl = document.querySelector('body');
return getComputedStyle(bodyEl);
// phantomJS-evaluate.js
const driver = require('node-phantom-promise');
const phantomjs = require('phantomjs-prebuilt');
...
* evaluate(options) {
const { url, type, viewWidth, language } = options;
const status = yield this.page.open(url);
// Bundle node-style javascript
const code = yield new Promise((resolve, reject) => {
browserify('./sandbox.js').bundle((err, buf) => {
if (err) {
reject(err);
return;
}
resolve(buf.toString('utf-8'));
})
});
// Evaluate bundled javascript
bodyStyle = yield this.page.evaluate(new Function(
'type',
'htmlStr',
'viewPort',
'renderLanguage',
code
)
, type, ''
, viewWidth
, language
);
return bodyStyle;
}
...
classList
shimFAQs
ES5, html5 api support form phantomjs sandbox
We found that phantomjs-shim demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.