Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
stacked-sparklines
Advanced tools
A web component for creating a graph that shows a set of stacked sparklines.
<stacked-sparklines data-data="DATA_GOES_HERE" caption="Example data" data-background="#00b7c6" data-foreground="white">
<!-- fallback content -->
</stacked-sparklines>
To install a web component you need to include the component's JavaScript file in your project. You can do this in one of two ways:
If you're already using npm or yarn to handle your project's dependencies, you can add stacked-sparklines to your project using the following command:
# If you use yarn
yarn add stacked-sparklines
# If you use npm
npm install stacked-sparklines
Then you can import the stacked-sparklines module into your project:
import "stacked-sparklines";
If you prefer not to use npm, you can include the stacked-sparklines build file directly:
<!-- Load Picobel -->
<script type='text/javascript' src='https://raw.githubusercontent.com/tomhazledine/stacked-sparklines/main/build/stacked-sparklines.0.0.1.js'></script>
Once you've included the stacked-sparklines module in your project, you can use the stacked-sparklines element in your HTML:
<stacked-sparklines>
<!-- fallback content -->
</stacked-sparklines>
-data
(required)Without any data, the component won't render anything. The data should be a nested 2D array of numbers. For example:
<stacked-sparklines data-data="[[1,2,3,4],[5,6,7,8]]"></stacked-sparklines>
FAQs
SVG stacked sparklines web component
The npm package stacked-sparklines receives a total of 1 weekly downloads. As such, stacked-sparklines popularity was classified as not popular.
We found that stacked-sparklines demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.