
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
spring-animator
Advanced tools
a little tool for animating scalar and vector values with spring forces
A little tool for easing values with spring forces for animations.
Here's an example.
Use npm to install.
npm install spring-animator --save
import { createSpring } from 'spring-animator'
const stiffness = 0.003
const dampening = 0.1
const startingValue = 10
const spring = createSpring(stiffness, dampening, startingValue)
// must first set a new destination value to animate towards
spring.setDestination(15)
spring.tick() // takes one step towards destination value
// pass custom stiffness and dampening values for just this tick
spring.tick(0.003, 0.1)
const value = spring.getCurrentValue() // returns the current value
I personally like these values:
{
stiffness: 0.003,
dampening: 0.1
}
npm install
npm start
And then make sure to open example/index.html in a browser!
Or you can just try it out here.
MIT, see LICENSE.md for details.
FAQs
a little tool for animating scalar and vector values with spring forces
We found that spring-animator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.