Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
sprite-player
Advanced tools
Web component for controlling sprite sheet animations.
npm install --save sprite-player
https://positlabs.github.io/sprite-player/examples/
<!-- load the x-tag lib -->
<script src='https://cdnjs.cloudflare.com/ajax/libs/x-tag/1.5.11/x-tag-core.js'></script>
<!-- load sprite-player component -->
<script src='node_modules/sprite-player/docs/sprite-player.js'></script>
<!-- use it! -->
<sprite-player src="./assets/run.png" rows="1" cols="8" fps="12" autoplay loop></sprite-player>
src: (string
) Path to sprite image.
frames: (int
) Number of frames in the animation. Defaults to rows * cols
.
rows: (int
) Number of rows in the sprite.
cols: (int
) Number of columns in the sprite.
fps: (Number
) Frames per second.
autoplay: (Boolean
) Automatically play the animation as soon as the src
is loaded.
loop: (Boolean
) Automatically replay the animation when it ends.
Note: All attributes are accessible as properties.
paused: (Boolean
) State of the animation.
duration: (Number
) Duration of animation in seconds.
play: Plays the animation. Sets paused
to false
.
pause: Pauses the animation. Sets paused
to true
.
play: Sent when playback of the media starts after having been paused; that is, when playback is resumed after a prior pause event. playing: Sent when the media begins to play (either for the first time, after having been paused, or after ending and then restarting). pause: Sent when playback is paused. ended: Sent when playback completes. loadstart: Sent when loading of the media begins. load: Sent when media is loaded. error: Sent when media failed to load
FAQs
Web component for controlling sprite sheet animations.
We found that sprite-player demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.