
Product
Introducing Reachability for PHP
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.
@floating-ui/dom
Advanced tools
This is the library to use Floating UI on the web, wrapping @floating-ui/core
with DOM interface logic.
Popper.js is a predecessor of the @floating-ui/dom library. It provides similar functionality for positioning tooltips and popovers. While Popper.js is widely used and has a larger community, @floating-ui/dom is its successor with a more modular architecture and potentially better performance.
Tippy.js is a highly popular tooltip and popover library built on top of Popper.js. It offers a more complete solution out of the box with a wide range of options and plugins for creating interactive floating UI elements. Compared to @floating-ui/dom, Tippy.js might be easier to use for those who want a ready-to-go solution with less setup.
Tooltip.js is another library for creating tooltips in web applications. It is part of the Bootstrap framework but can be used independently. While it provides a simple API for tooltips, @floating-ui/dom offers a lower-level API that can be used to build a wider variety of floating UI elements.
FAQs
Floating UI for the web
The npm package @floating-ui/dom receives a total of 48,851,895 weekly downloads. As such, @floating-ui/dom popularity was classified as popular.
We found that @floating-ui/dom demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.

Product
Export Socket alert data to your own cloud storage in JSON, CSV, or Parquet, with flexible snapshot or incremental delivery.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.