Just published: Version 2.0.0 of my #SFSymbols #React #icon package. Available on #GitHub [1] and #npmJS [2].
https://sfsymbolslib.layered.work
[1] https://github.com/phranck/sf-symbols-lib
[2] https://www.npmjs.com/package/sf-symbols-lib
Just published: Version 2.0.0 of my #SFSymbols #React #icon package. Available on #GitHub [1] and #npmJS [2].
https://sfsymbolslib.layered.work
[1] https://github.com/phranck/sf-symbols-lib
[2] https://www.npmjs.com/package/sf-symbols-lib
npmjs.com anyone? Slow as hell. Same for stackoverflow sites.❓
Do you need #SFSymbols in your Web project? I made a thing for that [1]. 😃
And I just published it on #npmjs [2].
#WebDevelopment #React #TypeScript
[1] https://sfsymbolslib.layered.work
[2] https://www.npmjs.com/package/sf-symbols-lib
> New TOTP (Time-based One-Time Password) setups for npm access will be permanently disabled. Existing TOTP configurations will continue to work for now, but they will be phased out in the coming months.
no, i zaraz tylko zintegrują webauthn z dowodami cyfrowymi i nie będzie można publikować pakietów w npmjs bez potwierdzenia tożsamości.
Przegapiłem też że #npmjs to teraz gith..., eee, micro$oft
As part of our ongoing commitment to securing the npm ecosystem, we’re implementing the first phase of security improvements outlined in our recent announcement. These changes will roll out over…
Nobody should be using npmjs without checking also this:
https://npm.anvaka.com/#/view/2d/decompress-tarbz2
And btw, how stupid is it that npmjs allows to sort by dependents but not by the number of transitive dependencies. And why don't they show transitive dependencies anyway? It would make it blatantly obvious what an abyss many packages are.
npm debug and chalk packages compromised
Affected:
"backslash (0.26m downloads per week)
chalk-template (3.9m downloads per week)
supports-hyperlinks (19.2m downloads per week)
has-ansi (12.1m downloads per week)
simple-swizzle (26.26m downloads per week)
color-string (27.48m downloads per week)
error-ex (47.17m downloads per week)
color-name (191.71m downloads per week)
is-arrayish (73.8m downloads per week)
slice-ansi (59.8m downloads per week)
color-convert (193.5m downloads per week)
wrap-ansi (197.99m downloads per week)
ansi-regex (243.64m downloads per week)
supports-color (287.1m downloads per week)
strip-ansi (261.17m downloads per week)
chalk (299.99m downloads per week)
debug (357.6m downloads per week)
ansi-styles (371.41m downloads per week)
"
Info >> https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
#node #security #compromised #programing #npmjs #npm #hacked
@cloudflare Cloudflare, are you blocking anything with the word “camel” in it? Such as NPM modules that have `camelcase` in the name?
Looking for a simple way to provide a compressed archive from a web application with the requirement to create the archive in the browser, not on the server.
- JSZip: 12 (transitive) dependencies
- tar-js: 0 dependencies
While zip may be more common, the 0-dependencies is a unique selling point for me!