Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Easily create and manipulate CSSStyleDeclarations
with javascript:
var s = require('sheetjs').createStyle;
// changes background color for all current and future matching elements
s('#content .my-selector').backgroundColor = 'green';
Good for when you have multple elements that need dynamic styling.
.css()
vs SheetJSImagine a web page with 1000 elements with class my-el
, and you want to change their background-color
to green
.
Using jQuery:
// changes background color for all current matching elements (new elements will not be green)
$('.my-el').css('background-color', 'green')
// took ~10ms
Using SheetJS:
// changes background color for all current AND future matching elements
s('.my-el').backgroundColor = 'green';
// took <1ms
http://codepen.io/jshanson7/pen/Jdpdga?editors=001
npm install sheetjs
Then reference either dist/sheet.js
or dist/sheet.min.js
in your html, or require('sheetjs')
with Browserify. If a module environment is not detected, sheetjs
will be attached to window
.
Clone repo, cd into it.
npm install
npm install -g gulp
gulp watch
gulp bundle --produciton
MIT
FAQs
Placeholder package for SheetJS
The npm package sheetjs receives a total of 2,507 weekly downloads. As such, sheetjs popularity was classified as popular.
We found that sheetjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.