Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@nrk/core-progress
Advanced tools
## `@nrk/core-progress` enhances the `` element and makes it universally accessible
@nrk/core-progress
enhances the <progress>
element and makes it universally accessiblenpm install @nrk/core-progress --save-exact
import coreProgress from '@nrk/core-progress' // Vanilla JS
import coreProgress from '@nrk/core-progress/jsx' // ...or React/Preact compatible JSX
<!--demo-->
<label>Progress:
<progress class="my-progress" value="20" max="100"></progress>
</label>
<script>
// optional: init progress when attributes value or max are not present:
// coreProgress('.my-progress', {value: 0, max: 100});
coreProgress('.my-progress', 50); // update progress
</script>
<!--demo-->
<label>Indeterminate progress:
<progress class="my-indeterminate-progress" max="100"></progress>
</label>
<script>
// Progress is indeterminate when no value attribute is present.
coreProgress('.my-indeterminate-progress', 'Loading...');
</script>
<!--demo-->
<div id="jsx-progress"></div>
<script type="text/jsx">
class MyProgress extends React.Component {
constructor (props) {
super(props)
this.state = { value: 50, max: 100 }
}
render () {
return <label> Progress JSX:
<CoreProgress className="my-jsx-progress" value={this.state.value} max={this.state.max} onChange={(state) => this.setState(state)} />
</label>
}
}
ReactDOM.render(<MyProgress />, document.getElementById('jsx-progress'))
</script>
<label>Progress:
<progress class="my-progress"></progress>
</label>
coreProgress(
selector, // Selector string or HTML Element
value // See table below
);
Type | Example | Description |
---|---|---|
Integer | 50 | An integer updates the progress value directly |
String | 'Loading...' | A non-numerical string will indicate that the progress is indeterminate. The same string will be read by screen readers. |
Object | {value: 50, max: 100} | An object can define a value and/or a max value |
import CoreProgress from '@nrk/core-progress/jsx'
<CoreProgress value={Number|String} max={Number} onChange={(event) => {}} />
Before a @nrk/core-progress
changes state, a progress.change
event is fired (both for VanillaJS and React/Preact components). The event is cancelable, meaning you can use event.preventDefault()
to cancel the state change. The event also bubbles, and can therefore be detected both from the progress element itself, or any parent element (read event delegation):
document.addEventListener('progress.change', (event) => {
event.target // The progress element
event.detail.value // The current progress value
event.detail.max // The max progress value
event.detail.percentage // The calculated percentage from (value / max * 100)
event.detail.indeterminate // True if the progress is indeterminate (no value attribute)
})
The progress element can be a bit hard to style nicely, but CSS-tricks has some nice tips on how to make it pretty!
NOTE: Old browsers that don't support the progress element will get a
<style>
tag injected into<head>
, which shows the percentage only.
FAQs
> `@nrk/core-progress` is an accessible progress element for displaying linear and radial progresses.
The npm package @nrk/core-progress receives a total of 42 weekly downloads. As such, @nrk/core-progress popularity was classified as not popular.
We found that @nrk/core-progress demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 152 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.