Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Did you develop a Vue application hosted on GitHub? Add this Vue component for embedding a GitHub fork ribbon on it!
vue-ribbon is a Vue Single File Component implementing GitHub ribbons. It comes with a set of properties making the component customizable for your needs.
If you need to customize the ribbon look and feel, you can use the following optional properties.
Name | Description | Type | Default |
---|---|---|---|
text | The text to display on the ribbon | String | vue-ribbon: check it out! |
url | The URL linked | String | https://flatmap.it/vue-ribbon |
position | The position of the ribbon. It can be right-top , right-bottom , left-top , left-bottom | String | right-top |
fixed | If defined, it makes the ribbon fixed | Boolean | false |
color | Defines the background color of the ribbon | String | #364a5e |
The color of the text is automatically detected by the component: for background color with a luma greater than 128 the text is white, otherwise black. See how it looks on this demo!
You can install vue-ribbon using npm:
npm install --save vue-ribbon
Alternatively, you can import vue-ribbon
via <script>
tag in the browser directly, avoiding the NPM installation:
<script src="https://unpkg.com/vue"></script>
<script src="https://unpkg.com/vue-ribbon"></script>
Once installed, it is easy to use it.
First, you need to import vue-ribbon
in your files. You can do that in different ways. For example, it can be imported into a build process for use in full-fledged Vue applications:
import Ribbon from 'vue-ribbon';
export default {
components: {
Ribbon,
},
// rest of the component
}
Once imported, you can use your component as follows:
<Ribbon/>
The inspiration for this component comes from github-fork-ribbon-css.
This component can be improved both in features and performances. Please, help in doing it better!
FAQs
Vue component for GitHub ribbons
The npm package vue-ribbon receives a total of 2,867 weekly downloads. As such, vue-ribbon popularity was classified as popular.
We found that vue-ribbon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.