Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@bbc/tv-lrud-spatial
Advanced tools
Move focus around a HTML document using Left, Right, Up, Down keys.
getNextFocus(currentFocus, keyCode, [scope])
currentFocus
should be an
HTMLElement
that you want LRUD spatial to consider as the element you are navigating from.
In simple applications, this can just be a reference to document.activeElement
.keyCode
should be a
keyCode
decimal representing the directional key pressed.scope
is an optional HTMLElement
that you only want to look for focusable candidates inside of. Defaults to the whole page if not provided.An HTMLElement
that LRUD spatial thinks you should
navigate to.
LRUD spatial defines focusable elements as those which match any of the following CSS selectors:
[tabindex]
a
button
input
Any potential candidate with the lrud-ignore
class, or inside any parent with the lrud-ignore
class, will not be considered focusable and will be skipped over. By default LRUD will not ignore candidates that have opacity: 0
or have a parent with opacity: 0
, so this class can be used for that.
Focusables can be wrapped in containers. Containers can keep track of the last
active focusable item within them using a data-focus
attribute.
Focusables that should be tracked must have a unique ID attribute.
When a container has no previous focus state, it's first focusable element is used instead.
At this time, containers are defined as matching the CSS selectors:
nav
, section
or .lrud-container
.
Adding attribute data-lrud-consider-container-distance
on a container will make LRUD also measure distances to that container's boundary, as well as its children. If the container is the closest of all the possible candidates assessed, LRUD will return one of its children - even if they are not necessarily the spatially closest focusable. The above container focus logic will still be used, so if the container has a previous focus state that will be the returned element. This allows for layouts where moving between containers is the desired behaviour, but their individual elements may not be in the correct positions for that. By default LRUD will only consider focusables when measuring, and ignores container positions.
In some instances, it is desirable to prevent lrud-spatial from selecting another
"best candidate" for example at the bottom of a list. To do this, a container element
should add an additional data-block-exit
attribute to prevent further selection in
that direction. This should be a space separated list.
E.g.
<div class="lrud-container" data-block-exit="up down">...</div>
To determine the next element that should be focused;
Requirements: Node.js 18
To get started, run npm ci
.
npm run build
will emit a transpiled and minified version of the library.
This is run during CI to prepare the artifact published to NPM. It can also be
useful for integrating against another local project with npm link
.
The test/layouts
directory contains HTML designed to mirror various
real-world use cases, and allow for behavioural vertification of library
features such as containers and grids.
Significant new features should come with corresponding layouts that test them.
Use npm test
to run the tests.
The tests use puppeteer to spin up a
headless browser. The browser loads the layouts mentioned above and runs
scenarios from lrud.test.js against the unminified
code from lib/
.
To investigate why a test is failing, or just to hack on some changes... run
npm run server
. Then go to http://localhost:3005 and
select a layout.
Remember to terminate this process before running the tests again!
FAQs
Spatial navigation library
The npm package @bbc/tv-lrud-spatial receives a total of 2,071 weekly downloads. As such, @bbc/tv-lrud-spatial popularity was classified as popular.
We found that @bbc/tv-lrud-spatial demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.