
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
progressive-image.js
Advanced tools
demonstration | GitHub | npm | donate | @craigbuckler | craigbuckler.com
progressive-image.js implements a progressively-loaded image effect similar to those seen on Facebook and Medium. A very small blurred image is replaced with the full-resolution equivalent when the element is scrolled into view.
Please use the code as you wish. Tweet me @craigbuckler if you find it useful and consider donating toward development.
Benefits:
srcset and sizes attributes)View demonstration and full documentation...
Include the minified CSS and JavaScript anywhere in your page:
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/progressive-image.js/dist/progressive-image.css">
<script src="https://cdn.jsdelivr.net/npm/progressive-image.js/dist/progressive-image.js"></script>
or use npm and a bundler:
npm i progressive-image.js
Then add progressively-loaded images:
<a href="full.jpg" class="progressive replace">
<img src="tiny.jpg" class="preview" alt="image" />
</a>
where:
full.jpg is the large image.tiny.jpg is a small preview image - typically 20px width.Both images must have the same aspect ratio.
Refer to demo.html for full documentation, examples, options, and usage notes. It is also available as a CodePen demonstration page.
<head>pageshow event for Single Page Appsclass names applied to the preview are applied to the full image (except preview)FAQs
progressive lazy-loading image system
The npm package progressive-image.js receives a total of 281 weekly downloads. As such, progressive-image.js popularity was classified as not popular.
We found that progressive-image.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.