
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
A small yet useful JS query framework that blends the difference between HTML nodes and NodeLists
As all libs of this kind even this one can do:
$(()=>{/* Do on load */});
// query HTML nodes
let array = $(".query");
//access queried nodes
let node = $(".query")[0];
// and do something with its properties or methods.
$(".query").on("click", ()=>{});
However, why have a limited set of properties and methods to work with? Maybe you want others or all of them. With this lib you can get, set or call all properties or functions defined on queried nodes.
// Disable all .homeButtons
$(".homeButton").disabled = true;
// Get array of ids of buttons with .homeButton class
let array = $(".homeButton").id;
// Assigns click event handler to all .homeButtons
$(".homeButton").addEventListener("click", ()=>{/*e.g. Go to homepage*/});
Install:
> npm i quelib
Import:
// with a bundler:
import $ from "quelib";
//or in Vanilla JS something like this:
import $ from "./node_modules/quelib/release/quelib.js";
//+ don't forget add type="module" to script tag in html
Or you can use source files in ./src/ to bundle & minify it yourself.
hide()show()toggle()addAlias(alias, property)
| name | is alias of |
|---|---|
on() | addEventListener() |
off() | removeEventListener() |
By default it looks in nodes' properties first; then, if not found, it looks in prototype chain. To alter this you can:
Use prefixes to force one or the other behavior.
$ to force lookup on nodes._ to force lookup in prototype chain (= standart behavior without this lib).To change these call setPrefixes(noMagic, magic).
Call setPrefixes(noMagic, magic) with noMagic set to empty string.
FAQs
A small yet useful JS query framework that blends the difference between HTML nodes and NodeLists
We found that quelib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.