Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/raquelxmoss/cycle-color-picker
A color picker component for Cycle.js. Cycle Color Picker is developed for usage within Cycle applications using xstream.
$ npm install --save cycle-color-picker
Import Cycle Color Picker into your project. Cycle Color Picker takes in a stream of colors, and returns a stream of colors based on the user's input.
// index.js
import ColorPicker from 'cycle-color-picker';
Create a Color Picker component, passing it a stream of colors, as well as the DOM driver and Mouse driver.
You can pass colors to Cycle Color Picker as hex
, rgb(a)
, hsl(a)
, or a named color (e.g. aliceblue
). If no color is passed to Cycle Color Picker, the initial color will default to white. You'll also need to pass in a DOM driver.
const props$ = xs.of({color: '#C3209f'});
const colorPicker = ColorPicker({DOM, props$});
Cycle Color Picker returns DOM
, and color$
, which you can access in your app. To display Cycle Color Picker, pass its DOM into your view function.
Here's a simple example of a Color Picker that changes the background color of the app. To see how to use Cycle Color Picker with Cycle's isolate function, check out the example.
import xs from 'xstream';
import {run} from '@cycle/xstream-run';
import {div, makeDOMDriver} from '@cycle/dom';
import ColorPicker from 'cycle-color-picker';
const drivers = {
DOM: makeDOMDriver('.app'),
};
function view (state) {
const containerStyle = {background: state.color};
return (
div('.container', {style: containerStyle}, [state.vtree])
);
}
function main ({DOM}) {
const props$ = xs.of({color: '#C3209F'});
const colorPicker = ColorPicker({DOM, props$});
const state$ = xs.combine(
colorPicker.DOM,
colorPicker.color$
);
return {
DOM: state$.map(([vtree, color]) => view({vtree, color}))
};
}
run(main, drivers);
Yes! Cycle Color Picker can be used with Cycle's isolate()
. Read the documentation for isolate()
, and check out the example.
Not yet! I'm hoping to work towards stream library diversity soon.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.