
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
c3 is a D3-based reusable chart library that enables deeper integration of charts into web applications.
c3-rails provides c3 for Rails 4 (it might work with Rails 3)
To install, add the following line to your Gemfile
:
gem 'c3-rails'
Then add these to their respective file:
app/assets/javascripts/applications.js
:
//= require c3
app/assets/stylesheets/applications.css
:
*= require c3
Now you've included c3
into your rails project.
But wait, there's more!
c3
requires D3
which c3-rails
does not include,
to get D3
installed try one of the following gems:
or you could copy d3.js
to your assets/javascripts
manually.
Now c3
is ready to be used on any pages that have assets
handled by rails asset pipeline.
This gem now follows the version of c3
being included.
So version 0.2.5
of this gem will provide
c3
at version 0.2.5
.
If you wish to have access to all of c3
's source files
you can install by putting this line in the Gemfile
instead:
gem 'c3-rails', :git => 'https://github.com/SunnyLi/c3-rails', :submodules => true
Then you'll be able to include files like
//= require c3/c3
//= require c3/c3.min
//= require c3/extensions/js/c3ext
*= require c3/c3
*= require c3/c3.min
*= require c3/htdocs/css/bootstrap.min
This is just an example, not that you would ever want to include bootstrap into your project this way..
FAQs
Unknown package
We found that c3-rails demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.