
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Yjs bindings for Slate.
Heavily inspired by slate-collaborative
Via npm:
npm install slate-yjs
Via yarn:
yarn add slate-yjs
slate-yjs
over slate-collaborative
?Performance. slate-collaborative
works well for small documents but can cause 20 seconds + load times on heavier ones which slate-yjs can load in a fraction of a second.
For a more in-depth comparison take a look at these benchmarks
You might also want to take a look at "CRDTs are the future" from the creator of sharedb
Adding a 2-way binding from the editor to a Yjs document is as easy as:
import { withYjs, SyncElement } from 'slate-yjs';
import * as Y from 'yjs';
const doc = new Y.Doc();
const sharedType = doc.getArray<SyncElement>('content');
const yjsEditor = withYjs(editor, sharedType);
Slate-yjs support syncing collaborative cursors using awareness:
import { withCursor, useCursors } from 'slate-yjs';
// Adds (and syncs) cursor information (anchor, focus) to the awareness local state.
const cursorEditor = withCursor(yjsEditor, provider.awareness);
// Returns a decorator that annotates text nodes with cursor information and
// a array containing all cursor information.
const { decorate, cursors } = useCursors(cursorEditor);
Take a look at the example project here
Please refer to each project's style and contribution guidelines for submitting patches and additions. In general, we follow the "fork-and-pull" Git workflow.
NOTE: Be sure to merge the latest from "upstream" before making a pull request!
FAQs
Yjs bindings for Slate.
The npm package slate-yjs receives a total of 307 weekly downloads. As such, slate-yjs popularity was classified as not popular.
We found that slate-yjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.