Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@collapsed/react
Advanced tools
A React custom-hook for creating flexible and accessible expand/collapse components.
You're probably looking for react-collapsed. This package (alongside @collapsed/core) is a WIP rewrite to create a Vanilla JS core.
A React hook for creating accessible expand/collapse components. Animates the height using CSS transitions from 0
to auto
.
auto
included!useCollapse
provides the necessary props, you control the styles and the elements.$ npm i @collapsed/react
import React from "react";
import { useCollapse } from "@collapsed/react";
function Demo() {
const { getCollapseProps, getToggleProps, isExpanded } = useCollapse();
return (
<div>
<button {...getToggleProps()}>
{isExpanded ? "Collapse" : "Expand"}
</button>
<section {...getCollapseProps()}>Collapsed content 🙈</section>
</div>
);
}
import React, { useState } from "react";
import { useCollapse } from "@collapsed/react";
function Demo() {
const [isExpanded, setExpanded] = useState(false);
const { getCollapseProps, getToggleProps } = useCollapse({ isExpanded });
return (
<div>
<button
{...getToggleProps({
onClick: () => setExpanded((prevExpanded) => !prevExpanded),
})}
>
{isExpanded ? "Collapse" : "Expand"}
</button>
<section {...getCollapseProps()}>Collapsed content 🙈</section>
</div>
);
}
useCollapse
takes the following options:
interface UseCollapseOptions {
/** If true, the disclosure is expanded. */
isExpanded?: boolean;
/**
* If true, the disclosure is expanded when it initially mounts.
* @default false
*/
defaultExpanded?: boolean;
/** Handler called when the disclosure expands or collapses */
onExpandedChange?: (state: boolean) => void;
/** Handler called at each stage of the animation. */
onTransitionStateChange?: (
state:
| "expandStart"
| "expanding"
| "expandEnd"
| "collapseStart"
| "collapsing"
| "collapseEnd",
) => void;
/** Timing function for the transition */
easing?: string;
/**
* Duration of the expand/collapse animation.
* If 'auto', the duration will be calculated based on the height of the collapse element
*/
duration?: "auto" | number;
/** Height in pixels that the collapse element collapses to */
collapsedHeight?: number;
/**
* Unique identifier used to for associating elements appropriately for accessibility.
*/
id?: string;
}
And returns the following API:
interface CollapseAPI {
isExpanded: boolean;
setExpanded: (update: boolean | ((prev: boolean) => boolean)) => void;
getToggleProps: <T extends HTMLElement>(
props?: React.ComponentPropsWithoutRef<T> & { refKey?: string },
) => React.ComponentPropsWithRef<T>;
getCollapseProps: <T extends HTMLElement>(
props?: React.ComponentPropsWithoutRef<T> & { refKey?: string },
) => React.ComponentPropsWithRef<T>;
}
padding
to the component that gets getCollapseProps
, the animation is janky and it doesn't collapse all the way. What gives?The collapse works by manipulating the height
property. If an element has vertical padding, that padding expandes the size of the element, even if it has height: 0; overflow: hidden
.
To avoid this, simply move that padding from the element to an element directly nested within in.
// from
<div {...getCollapseProps({style: {padding: 20}})}
This will do weird things
</div>
// to
<div {...getCollapseProps()}
<div style={{padding: 20}}>
Much better!
</div>
</div>
FAQs
A React custom-hook for creating flexible and accessible expand/collapse components.
We found that @collapsed/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.