
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@grixu/list
Advanced tools
It's set of list components. There are components:
WrapperActionDescriptionIt is a wrapper component which allows you to display an array of objects as a stacked or grid list.
<template>
<ListWrapper layout="stack" :items="dataItems" per-page="12">
<template #header>Header</template>
<template #details>Minor details? Please put them here.</template>
<template #buttons>Provide buttons to allow user to take actions</template>
<template #avatar>You can display user avatar here</template>
Default slot is used to provide main information
</ListWrapper>
</template>
<script setup>
import { Wrapper } from "@grixu/list"
</script>
Action list is simple list based on provided array of objects, on which of them you can execute an action. By default, we provide close icon (which remove action), but you can adjust it, through slots.
<template>
<ActionList>
<template #title>List of users</template>
<template #action>
Here, you can customize button which is used to handle an action
</template>
<template #default="{ item }">
And of course customize way, you display information using scopedSlot!
</template>
</ActionList>
</template>
<script setup>
import { Action } from "@grixu/list"
</script>
Description is component designed to display details - information wrapped into an object.
<template>
<Description :item="item">
<template #id="{ content }"> {{ content }}</template>
<template #name="{ content }"> {{ content }}</template>
<template #invoice="{ content }">
<Badge success>Invoice issued</Badge>
</template>
<template #salesmens="{ content }">
<p class="flex gap-x-2">
<Avatar v-for="item in content" :key="item" :text="item" class="mr-1"></Avatar>
</p>
</template>
<template #area="{ content, value }">
<p class="text-lg font-semibold underline"> {{ content }}</p>
</template>
</Description>
</template>
<script setup>
import {Description} from "@grixu/list"
const item = {
ID: 12312321,
customer: "Mateusz Skrobiś",
invoice: false,
salesmens: ["Marek S", "Jarek D", "Czarek M"],
address: "Polna 140B",
area: "North",
}
const itemWithLabels = {
ID: {
label: "Lp",
content: 123,
},
customer: {
label: "Klient",
content: "Mateusz Skrobiś",
},
invoice: {
label: "Fakturowanie?",
content: false,
},
salesmens: {
label: "Sprzedawcy",
content: ["Marek S", "Jarek D", "Czarek M"],
},
address: {
label: "Ulica",
content: "Polna 140B",
},
area: {
label: "Oddział",
content: "North",
},
}
</script>
Please see CHANGELOG in each package for more information what has changed recently.
Please see CONTRIBUTING for details.
The MIT License (MIT). Please see License File for more information.
FAQs
List wrapper for presenting array of data as stacked or grid list
We found that @grixu/list demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.