
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
touch-pricker
Advanced tools
Free Touch Pricker
(WIP)
Currently supports a pricker for Stedman touches on various stages, based heavily on that created by Mark Davies.
Install using npm or yarn:
# npm
npm install --save-dev touch-pricker
# yarn
yarn add --dev touch-pricker
Modify your page to include an element where the pricker will be mounted:
<div id="pricker"></div>
Then load using your preferred bundler and module syntax, either CommonJS:
const Pricker = require('touch-pricker');
const thePricker = Pricker.create('pricker'); // ID of mount element
... or using ES6 modules:
import Pricker from 'touch-pricker';
const thePricker = Pricker.create('pricker'); // ID of mount element
Download the source file of your choice from the dist directory of this repository:
touch-pricker.jstouch-pricker.min.jsHost the file locally and add to scripts:
<script type="text/css" src="touch-pricker.min.js"></script>
Modify your page to include an element where the pricker will be mounted:
<div id="pricker"></div>
... and then load it:
<script type="text/javascript">
window.onload = function () {
var thePricker = Pricker.create('pricker'); // ID of mount element
};
</script>
See examples/mbd.html for a full example.
The Pricker.create() call has the following signature:
Pricker.create(id: string, config: any): Pricker.Pricker.Abstract;
This currently supports the following configuration option:
iframe{
iframe: true // default
}
Controls whether to create the pricker within an <iframe> element in order to
isolate it from the parent page.
This prevents scripts or styles leaking between the pricker and its host,
but makes debugging more difficult.
Install nvm (or manually install a
node version compatible with that defined in nvmrc).
Install yarn.
nvm install
yarn install
bin/gulp
build - builds source codebuild-tests - builds testcases (depends on build)docs - builds TypeDoc documentationtest - runs unit tests under PhantomJS (default)test-browsers - runs unit tests under various browsers (see karma.conf.js)watch - rebuild whenever changes are madenpm scriptsbuild - as abovelint - calls tslint in isolationtest - as abovewatch - as aboveBuild tests (bin/gulp build-tests) then load up /jasmine.html.
FAQs
Free Touch Pricker
We found that touch-pricker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.