
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
xjbrowsercheck
Advanced tools
基于 browser-update 封装的浏览器更新检测方案
npm install @forchange/browser --save
or
yarn add @forchange/browser --save
import browserUpdate from '@forchange/browser'
browserUpdate(options)
{
// 制定需要提醒的浏览器版本,低于此版本的浏览器会被提醒
// f:22 ---> Firefox < 22 会被通知
// 负数标明比最新版本低多少个版本的浏览器能被接受
// c:-5 ---> Chrome < 35 会收到通知,假设 Chrome 的最新版本为 40.
// 语义版本需要加引号 为字符串,可以设置false,代表这款浏览器都不兼容
required:{
chrome:-1,
firefox:-1,
edge:-1,
uc:-1,
safari:-1,
ie: false,
opera: -1,
yandex: -3,
vivaldi: '1.95',
samsung: '12.1'
},
reminder:20, // x小时后重复显示通知 0为一直显示
reminderClosed:150, // x小时后重复显示通知,即使用户已明确关闭
test:false, // true为总显示提示条 (测试用)
lang:'zh-CN',
text:'',
// 自定义文字
// 占位符 {brow_name} 会被替换成当前浏览器名称, {up_but} 会被替换成更新按钮的链接的标签内容,而 {ignore_but} 会被替换成忽略按钮的标签内容。
// 示例︰ "您的网页浏览器 ({brow_name}) 已过期:<a{up_but}>更新浏览器</a> <a{ignore_but}>忽略</a>。"
noCloseBtn:false, // 不显示忽略按钮
url:'' // 跳转新窗口链接
}
text: {
msg:'Your web browser ({brow_name}) is out of date.',
msgmore: 'Update your browser for more security, speed and the best experience on this site.',
bupdate: 'Update browser',
bignore: 'Ignore'
}
browser-update默认设置了提示的样式,您可以使用自己的css样式来覆盖他们。为来确保正确覆盖您需要额外向您的样式规则添加一些选择器,例如:
body .buorg {
font-size:20px
}
全局样式加上屏蔽test生成报错元素
.buorg .buorg-test {
display: none;
}
test: true界面报错不需关心http://browser-update.org/#test-bu 请在新的标签页中打开该网址以保证网页被正确地重新加载。更多详细信息(英文)封装 browser-update@3.3.25
FAQs
基于 browser-update 封装的浏览器更新检测方案
We found that xjbrowsercheck demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.