Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/aurelia/ui-virtualization
This library is part of the Aurelia platform and contains a plugin that provides a virtualized repeater and other virtualization services. This plugin enables "virtualization" of list through a new virtual-repeat.for
. When used, the list "virtually" as tens or hundreds of thousands of rows, but the DOM only actually has rows for what is visible. It could be only tens of items. This allows rendering of massive lists of data with amazing performance. It works like repeat.for, it just creates a scrolling area and manages the list using UI virtualization techniques.
To keep up to date on Aurelia, please visit and subscribe to the official blog and our email list. We also invite you to follow us on twitter. If you have questions look around our Discourse forums, chat in our community on Gitter or use stack overflow. Documentation can be found in our developer hub. If you would like to have deeper insight into our development process, please install the ZenHub Chrome or Firefox Extension and visit any of our repository's boards.
Install via npm
npm install aurelia-ui-virtualization
Load the plugin
export function configure(aurelia) {
aurelia.use
.standardConfiguration()
.developmentLogging()
.plugin('aurelia-ui-virtualization'); // Add this line to load the plugin
aurelia.start().then(a => a.setRoot());
}
Simply bind an array to virtual-repeat
like you would with the standard repeat
. The repeated rows need to have equal height throughout the list, and one items per row.
<template>
<div virtual-repeat.for="item of items">
${$index} ${item}
</div>
</template>
<template>
<ul>
<li virtual-repeat.for="item of items">
${$index} ${item}
</li>
</ul>
</template>
<template>
<table>
<tr virtual-repeat.for="item of items">
<td>${$index}</td>
<td>${item}</td>
</tr>
</table>
</template>
export class MyVirtualList {
items = ['Foo', 'Bar', 'Baz'];
}
With a surrounding fixed height container with overflow scroll. Note that overflow: scroll
styling is inlined on the elemenet. It can also be applied from CSS.
<template>
<div style="overflow: scroll; height: 90vh">
<div virtual-repeat.for="item of items">
${$index} ${item}
</div>
</div>
</template>
If you are running the plugin in the skeleton-naviagion
project, make sure to remove overflow-x: hidden;
and overflow-y: auto;
from .page-host
in styles.css
.
<template>
<div virtual-repeat.for="item of items" infinite-scroll-next="getMore">
${$index} ${item}
</div>
</template>
export class MyVirtualList {
items = ['Foo', 'Bar', 'Baz'];
getMore(topIndex, isAtBottom, isAtTop) {
for(let i = 0; i < 100; ++i) {
this.items.push('item' + i);
}
}
}
Or to use an expression, use .call
as shown below.
<template>
<div virtual-repeat.for="item of items" infinite-scroll-next.call="getMore($scrollContext)">
${$index} ${item}
</div>
</template>
export class MyVirtualList {
items = ['Foo', 'Bar', 'Baz'];
getMore(scrollContext) {
for(let i = 0; i < 100; ++i) {
this.items.push('item' + i);
}
}
}
The infinite-scroll-next
attribute can accept a function, a promise, or a function that returns a promise.
The bound function will be called when the scroll container has reached a point where there are no more items to move into the DOM (i.e. when it reaches the end of a list, either from the top or the bottom).
There are three parameters that are passed to the function (getMore(topIndex, isAtBottom, isAtTop)
) which helps determine the behavior or amount of items to get during scrolling.
topIndex
- A integer value that represents the current item that exists at the top of the rendered items in the DOM.isAtBottom
- A boolean value that indicates whether the list has been scrolled to the bottom of the items list.isAtTop
- A boolean value that indicates whether the list has been scrolled to the top of the items list.<template/>
is not supported as root element of a virtual repeat template. This is due to the requirement of aurelia ui virtualization technique: item height needs to be calculatable. With <tempate/>
, there is no easy and performant way to acquire this value.virtual-repeat
, unlike repeat
. I.e: built-in template controllers: with
, if
, replaceable
cannot be used with virtual-repeat
. This can be workaround'd by nesting other template controllers inside the repeated element, with <template/>
element, for example:<template>
<h1>${message}</h1>
<div virtual-repeat.for="person of persons">
<template with.bind="person">
${Name}
</template>
</div>
</template>
:nth-child
and similar selectors. Virtualization requires appropriate removing and inserting visible items, based on scroll position. This means DOM elements order will not stay the same, thus creating unexpected :nth-child
CSS selector behavior. To work around this, you can use contextual properties $index
, $odd
, $even
etc... to determine an item position, and apply CSS classes/styles against it, like the following example:<template>
<div virtual-repeat.for="person of persons" class="${$odd ? 'odd' : 'even'}-row">
${person.name}
</div>
</template>
This library can be used in the browser only.
To build the code, follow these steps.
npm install
npm run build
dist
folder, available in module formats: es2015, es2017, AMD, CommonJS and UMD.To run the unit tests, first ensure that you have followed the steps above in order to install all dependencies and successfully build the library. Once you have done that, proceed with these additional steps:
npm run test
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.