
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@meadow/react-slider
Advanced tools
Clean and simple Slider component. For when just won't do.
Clean and simple Slider component. For when <input type="range" />
just won't do (IE9).
This component is designed for use with Browserify (but should work with anything CommonJS compatible). You can easily install it with npm:
npm install @meadow/react-slider
Meadow Slider is a drop-in replacement for <input type="range" />
with a couple extras here and there. Basic usage looks something like this:
import Slider from '@meadow/react-slider';
const App = function () {
return (
<div>
<Slider min={5} max={150} />
</div>
)
}
In order for this component to work, you must also include some styles. The easiest way to do so is by including the compiled CSS directly from this module:
import 'node_modules/@meadow/react-slider/dist/styles/slider.css';
Property | Type | Description |
---|---|---|
min | Number | The minimum value of the slider. |
max | Number | The maximum value of the slider. |
step | Number | If set, this splits the slider into a set of steps that are step apart. |
value | Number | The value of the slider. If set, the slider will be a controlled component. You will need to set the onChange handler and update value manually. |
defaultValue | Number | The intial value of the slider. If set, the slider will be an uncontrolled component. |
onChange | Function | Callback to be fired when the value of the slider changes. Takes a single argument, newValue . |
className | String | The CSS classes to be applied to the base slider element. |
FAQs
Clean and simple Slider component. For when just won't do.
The npm package @meadow/react-slider receives a total of 0 weekly downloads. As such, @meadow/react-slider popularity was classified as not popular.
We found that @meadow/react-slider demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.