
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
is a simple non-dependent, lightweight and customisable notification engine.
Notifications comes in many shapes and forms and yet they all seem to have the same requirements - or at least the most of them. Sting serves the purpos of kickstarting and streamlining your on-site notifications so that you can focus on getting the right messages out there.
Jumping into the source you'd quickly realize that there's no magic going on here. No fancy buzzword-dependencies, promises, observables or other browser-support-concerning-functionality. Just plug it in and get your message out there.
chill dude - here you go!
// You obviusly need to include Sting
import Sting from 'sting';
// Make your first Sting notification area, with everything on default
const topNotifications = new Sting({
className: 'sting__notifications', // Wrapper className
duration: 3000, // 0 or false to disable disapearing notifications
parentElement: document.body // Where should we inject the notification area?
});
// Boom guys! This is the magic
topNotifications.notify('Hey guys - Check this out!');
I thought you might ask that Here is an example of how to extend the functinallity to support promises
class StingPromise extends Sting {
constructor(config) {
super(config);
}
notify(message) {
return new Promise((resolve) => {
let notification = super.notify(message);
notification.on('remove:post', () => resolve(notification));
});
}
}
const topNotification = new StingPromise();
topNotification.notify('Sleeeeek').then((notification) => {
console.log('awesome');
});
The base class used to extend Sting and StingNotification. Adds eventlisteners as well as render and remove methods.
| Property | Default | |
|---|---|---|
| className | The DOM items className | '' |
| tag | The DOM wrapper Node-Tag | div |
| parentElement | The Node to append child upon render | document.body |
| template | Template to render | <${'tag'} class="${'className'}"></${'tag'}> |
| Method | Arguments | Return | |
|---|---|---|---|
| on | Listen to event | (event, callback) | off method |
| off | Remove event listener | (event, callback) | |
| broadcast | Trigger event | (event, values) | |
| render | Render and inject to parentElement | ||
| remove | Remove rendered element |
| Event | Description |
|---|---|
| render | Pre rendered and injected |
| render:post | Post rendered |
| remove | Pre rendered element removed |
| remove:post | Post removed |
Extends StingBase Sting is the notification area. This will act as a wrapper to all notifications.
| Property | Default | |
|---|---|---|
| className | The DOM items className | 'sting__notifications' |
| duration | How long the notification is visible. 0 will make it permanent | 3000 |
| notification | Change the notification type | StingNotification |
| Method | Arguments | Return | |
|---|---|---|---|
| notify | Add a notificaiton to the area | (string) | StingNotification |
| Event | Description |
|---|---|
| notify | Pre adding notification |
| notify:post | Post added |
Extends StingBase StingNotification is the individual notification. This holds the messages and is the rendered notification shown.
| Property | Default | |
|---|---|---|
| className | The DOM items className | 'sting__notification' |
| duration | How long the notification is visible. 0 will make it permanent | 0 |
| template | Template to render | <${'tag'} class="${'className'}">${message}</${'tag'}> |
| Method | Arguments | Return | |
|---|---|---|---|
| enter | Render the notification | StingNotification | |
| leave | Remove the notification | StingNotification |
| Event | Description |
|---|---|
| enter | Pre rendering |
| enter:post | Post rendered and injected |
| leave | Pre removing |
| leave:post | Pre removing |
FAQs
Sting! Is a tiny lightweight, themable and highly customizable notification-popup.
The npm package sting receives a total of 12 weekly downloads. As such, sting popularity was classified as not popular.
We found that sting demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.