
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
❗ ADVICE: This project has been archived and, unless further notice, will not be updated anymore.
Photoshop-like jQuery Color Picker plugin with various skins and layouts, touch, and responsive.
npm i wcolpick
Upload the two files “wcolpick.js” and “wcolpick.css” into your hosting space (consult the documentation/guide of your host provider for more informations).
Include the following code in the head to enable the plugin in a web page, replacing the "..." with the paths of the files.
<link rel="stylesheet" type="text/css" href=".../wcolpick.css" />
<script type="text/javascript" src=".../wcolpick.js"></script>
loads() function on the DOM element that will contain the plugin.<script type="text/javascript">
jQuery(function() {
$('#mycolorpicker').loads();
});
</script>
<div id="mycolorpicker"></div>
After cloning the project, find the "documentation.pdf" file that contains all the info about the plugin.
This plugin requires jQuery 1.7.0 or later.
Latest version of jQuery (if you need it): https://code.jquery.com
Copyright (C) 2017-2020 devpelux (Salvatore Peluso)
Licensed under MIT license.
(Based on colpick by Jose Vargas')
FAQs
Photoshop-style Full featured Color Picker for jQuery - Wcolpick
The npm package wcolpick receives a total of 3 weekly downloads. As such, wcolpick popularity was classified as not popular.
We found that wcolpick demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.