
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
skip-link-focus
Advanced tools
Make "skip to content" links more accessible.
Include skip-link-focus.js above the closing </body> tag and initialize it:
<script src="skip-link-focus.js"></script>
<script>skipLinkFocus.init();</script>
Or if you're using Browserify:
require( 'skip-link-focus' ).init();
init() takes an optional options argument:
options.selector {String} Specifies a DOM selector where skip links are to be found. This is used to handle an edge case where, if a hash is present in the URL on initial load (or refresh), clicking the skip link wouldn't actually fire a hashchange event, making the skip link unusable. Usage example: init( { selector: '.generic-skip-link-class' } ). Defaults to .skip-link.Makes "skip to content" links work correctly in IE9, Chrome, and Opera to improve accessibility.
Initial code and background can be found here:
http://www.nczonline.net/blog/2013/01/15/fixing-skip-to-content-links/
Further improvements were made in the _s WordPress theme by Automattic.
This module is based on the _s implementation with the following enhancements:
hashchange event isn't fired because the address bar already has the corresponding hash.Additional reading on skip link accessibility: https://www.bignerdranch.com/blog/web-accessibility-skip-navigation-links/
To manually test the script in a browser of your choice, run npm test and head to http://localhost:5000/test/.
FAQs
Make 'skip to content' links more accessible.
The npm package skip-link-focus receives a total of 44 weekly downloads. As such, skip-link-focus popularity was classified as not popular.
We found that skip-link-focus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.