
Research
/Security News
Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.
@activewidgets/js
Advanced tools
ActiveWidgets is a multi-framework UI component library. This package provides datagrid component for javascript / no-framework environments.
Live demo / Developer guide / API reference
Add @activewidgets/js to your project dependencies -
> npm i --save @activewidgets/js
Import mount function into your app -
import { mount } from "@activewidgets/js";
Now, assuming that you've added a placeholder ax-datagrid tag to the page
<ax-datagrid>Loading...</ax-datagrid>
Mount an actual ActiveWidgets component at the placeholder position -
const rows = [
{ message: 'Hello, World!' }
];
mount('ax-datagrid', { rows });
Live example | Source on github | Edit on stackblitz
For quick prototyping the package is also available over ActiveWidgets CDN -
<script src="https://cdn.activewidgets.com/js"></script>
In this case the mount function is available at ActiveWidgets.JS global namespace.
var mount = ActiveWidgets.JS.mount;
var rows = [
{ framework: 'none', source: 'CDN', language: 'ES5'}
];
mount('ax-datagrid', { rows: rows });
Live example | Source on github | Edit on stackblitz
The first argument for the mount function should be the target element (or selector).
The second argument is a properties object. The target element tagName defines the component ID.
mount('#grid1', { columns, rows });
The placeholder element tag must be ax-datagrid
<ax-datagrid id="grid1"></ax-datagrid>
The mount function returns update and destroy methods.
const { update } = mount('#my-grid', { columns, rows });
//...
update({ rows: newRows });
You have to provide columns and rows properties to the datagrid to show some data. The properties of each column object define how the data will be rendered -
The style (string|object) or className properties allow to change the styling of the column and cell elements.
const columns = [
{ header: 'Code', field: 'customerID', width: 80, style: 'background:#def', fixed: true },
{ header: 'Company Name', field: 'companyName', width: 160 },
{ header: 'Contact', field: 'contactName', width: 120 },
{ header: 'Title', field: 'contactTitle', width: 120 },
{ header: 'Address', field: 'address', width: 120, align: 'right' }
];
const rows = northwind.customers;
mount('ax-datagrid', { columns, rows });
Live example | Source on github | Edit on stackblitz
In addition to the standard DOM keyboard and mouse events the datagrid emits composite mouse event which makes it easier to find the elements affected by the user action -
function onMouse({ row }){
alert(`row ${ row.key } clicked!`);
}
mount('ax-datagrid', { onMouse, columns, rows }); // put event handlers together with props
Live example | Source on github | Edit on stackblitz
FAQs
Datagrid component (no framework)
The npm package @activewidgets/js receives a total of 3 weekly downloads. As such, @activewidgets/js popularity was classified as not popular.
We found that @activewidgets/js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.

Research
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.