
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@agney/react-windowed-select
Advanced tools
[![Travis][build-badge]][build] [![npm package][npm-badge]][npm] [![Coveralls][coveralls-badge]][coveralls] [![Storybook][storybook-badge]][storybook]
An integration of react-window with react-select to efficiently render large lists.
The easiest way to use react-windowed-select is to install it from npm:
npm install react-windowed-select
Then use it in your app:
import React from "react";
import WindowedSelect from "react-windowed-select";
const options = [];
for (let i = 0; i < 10000; i += 1) {
options.push({
label: `Option ${i}`,
value: i
});
}
function App () {
return <WindowedSelect options={options} />;
}
For more examples, check out the Storybook.
react-windowed-select is just a wrapper around react-select.
All props passed to the WindowedSelect component are forwarded to the default exported Select component
from react-select.
The number of options beyond which the menu will be windowed.
All of the named exports from react-select are re-exported from react-windowed-select for easy access to features
that allow you to customize your Select component.
import { components, createFilter } from 'react-windowed-select';
import React from "react";
const options = [
{ value: 1, label: 'Foo' },
{ value: 2, label: 'Bar '},
];
const customFilter = createFilter({ ignoreAccents: false });
const customComponents = {
ClearIndicator: (props) => <components.ClearIndicator {...props}>clear</components.ClearIndicator>
};
function App () {
return (
<WindowedSelect
components={customComponents}
isClearable={true}
filterOption={customFilter}
options={options}
/>
);
}
By default, react-windowed-select wraps the standard Select component from react-select.
If you want to add windowing to the Async or Creatable Select components from react-select, use the WindowedMenuList:
import { WindowedMenuList } from 'react-windowed-select';
import CreatableSelect from 'react-select/creatable';
function App () {
return (
<CreatableSelect
components={{ MenuList: WindowedMenuList }}
// ...other props
/>
);
}
You can still use the styles API from react-select to customize how your Select component looks.
The height property of the Option, GroupHeading, NoOptionsMessage and/or LoadingMessage components is used to determine the total height of the windowed menu and the following defaults are provided:
| Component | Default Height |
|---|---|
Option | 35px |
GroupHeading | 25px |
NoOptionsMessage | 35px |
LoadingMessage | 35px |
To override these values, use the styles prop like you would with a regular react-select component.
<WindowedSelect
options={options}
styles={{
option: (base) => ({
...base,
height: 60, // must be type number
padding: '20px 12px',
}),
}}
/>
Grouped options are not fully supported.
In order to ensure proper scrolling and focus behavior, options nested inside the Group component are flattened. This changes the component structure within MenuList in the following way:
MenuList
│
└───Group
│ │
| └───GroupHeading
|
└───Option 1
|
└───Option 2
FAQs
[![Travis][build-badge]][build] [![npm package][npm-badge]][npm] [![Coveralls][coveralls-badge]][coveralls] [![Storybook][storybook-badge]][storybook]
We found that @agney/react-windowed-select demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.