
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
__ __ ______ ______ ______ ______
/\ \ _ \ \ /\ __ \ /\ == \ /\ ___\ /\___ \
\ \ \/ ".\ \ \ \ __ \ \ \ __< \ \ __\ \/_/ /__
\ \__/".~\_\ \ \_\ \_\ \ \_\ \_\ \ \_____\ /\_____\
\/_/ \/_/ \/_/\/_/ \/_/ /_/ \/_____/ \/_____/
==========INPUT=HARDWARE=DETECTION=FOR=JAVASCRIPT========
Sometimes it makes sense for a user interface to adapt to the input device being used. For example, in my app KameSame I wanted to expand the input size when the user was interacting with an Apple Pencil as opposed to the touchscreen or a physical keyboard (demo). Unfortunately, browsers don't make it easy to answer the question "what's the most recent input method that's been used?", or "what methods have been used since the page was loaded?"
This tiny package helps answer those questions with a pretty straightforward little API.
$ npm i -S warez
Then const warez = require('warez') or import * as warez from 'warez' or
whatever.
The package offers start() and stop() functions that govern whether user
interactions are being actively monitored. If you intend to track the current
input device, just kick things off with:
warez.start()
And you can remove the event handlers with:
warez.stop()
If you want to know the most recently used input device, you can call:
warez.currentDevice() // will be 'pen', 'keyboard', touch', or 'mouse'
And if you call:
warez.allDevices() // an array of one or more of the above input types
You can also register an event handler to respond whenever the input device currently being used by the user changes:
warez.onDeviceChange(e => {
console.log('Now using device', e.current)
console.log('Previous device was', e.previous)
// You might update any nodes in the DOM whose CSS styles ought to reflect
// the current input device with something like this:
document.querySelectorAll('[data-warez]').forEach(node => {
node.setAttribute('data-warez', e.current)
})
})
If you want to remove the handler, you can pass a reference to the function:
warez.removeDeviceChangeHandler(yourHandlerFunction)
Here's a little demo of the test page included in this repo:

FAQs
Detects which input devices are being used
We found that warez demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.