
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Falling snowflakes for your website and christmas mood ❄️
npm install snoweb --save
or
yarn add snoweb
import { Snoweb } from 'snoweb';
const snoweb = new Snoweb();
snoweb.start();

You can provide configuration object Partal<SnowebConfig> into the constructor.
See the description in the API section
const snoweb = new Snoweb({
gravity: 20,
snowflakesColor: 'red',
snowflakesCount: 200,
zIndex: 1000,
});
By default snoweb.stop() method just smoothly stops the snowfall animation. However, the DOM element still remains.
If you want to stop and fully destroy it you can do the following:
const snoweb = new Snoweb();
snoweb.start();
// ...
snoweb.stop(() => snoweb.destroy());
| Methods | What it does? |
|---|---|
| constructor(config: Partial<SnowebConfig>) | Default constructor which is executed after you have called new Snoweb(). |
| start(): void | Begins the snowfall. Ho-ho-ho 🎅 |
| stop(afterStopCallback?: () => void): void | Stops the snowfall. afterStopCallback?: () => void - a callback function which is called after the snowfall is fully stopped (all the snowflakes have fallen). |
| destroy(): void | Stops the snowfall immediately and destroys the DOM element |
| isStarted(): boolean | Shows whether the snowfall is being started |
| Property | What it does? | Default value |
|---|---|---|
| snowflakesCount: number | Exact count of the snowflakes to be rendered. Might affect performance if the value is too big. | 100 |
| gravity: number | The higher the value the faster the snowflakes will fall | 10 |
| snowflakesColor: string | CSS color of the snowflakes | '#fff' |
| zIndex: number | Snowfall z-index | 1000000 |
FAQs
Falling snowflakes for your website and christmas mood ❄️
We found that snoweb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.