Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
@picmo/renderer-twemoji
Advanced tools
Adds support to PicMo for rendering emojis from Twemoji instead of native platform emojis.
Requires the base PicMo package to be installed as a peer dependency.
npm install @picmo/renderer-twemoji
import { createPicker } from 'picmo';
import { TwemojiRenderer } from '@picmo/renderer-twemoji';
// The picker must have a root element to insert itself into
const rootElement = document.querySelector('#pickerContainer');
// Create the picker
const picker = createPicker({
rootElement,
renderer: new TwemojiRenderer()
});
// The picker emits an event when an emoji is selected. Do with it as you will!
picker.addEventListener('emoji:select', event => {
console.log('Emoji selected:', event.emoji);
});
[5.0.0] - 2022-05-15
First PicMo release (previously Emoji Button).
@joeattardi/emoji-button
package split into three packages:
picmo
- The main emoji picker package, can be used to create inline emoji pickers.@picmo/popup-picker
- The popup picker package, can be used to create popup emoji pickers. Requires picmo
as a peer dependency.@picmo/renderer-twemoji
- The Twemoji renderer. Requires picmo
as a peer dependency.data:ready
event signals when the database is initialized and ready to use.createDatabase
: Creates an emoji database ahead of time. This is not required as the picker will initialize the database if one doesn't exist.deleteDatabase
: Deletes an emoji databasedeleteRecents
: Deletes the recent emojis from local storagepicker:open
) and closed (picker:close
).className
for applying custom theme styling.initialEmoji
for initial emoji selection.locale
for emoji data locale.messages
for emojibase-data message data.renderer
for specifying emoji rendererhideOnClickOutside
to control whether or not the picker should close when clicking outside of it.hideOnEscape
to control whether or not the picker should close when pressing the escape key.showCloseButton
to control whether or not the close button should be shown.triggerElement
to denote the element that should trigger the popup.picmo
package only creates inline pickers. Popup pickers are created with createPopup
from the @picmo/popup-picker
package instead of createPicker
from the main package. This function accepts the same options as the main package for the picker itself, and accepts an additional object with popup specific options.emoji-data
npm package or can be downloaded from a CDN at runtime.@picmo/popup-picker
package.@picmo/twemoji
package.emoji
event changed to emoji:select
.
{ data, emoji, hexcode, url, label }
.hidden
event changed to to emoji:hide
in @picmo/popup-picker
.svg
(the default) or png
..addEventListener
instead of .on
.showAnimation
changed to animate
.custom
format changed.
{ name, emoji }
{ data, emoji, label, tags, url }
emojiVersion
is now a number or the string auth
for automatic detection.recentsCount
changed to maxRecents
.showCategoryButtons
changed to showCategoryTabs
.rows
changed to visibleRows
.autoHide
changed to hideOnEmojiSelect
.icons
removed.plugins
removed.twemojiOptions
removed (now controlled by @picmo/renderer-twemoji
package).styleOptions
removed (now controlled by CSS variables in CSS class specified by the className
option).FAQs
Twemoji renderer for PicMo
The npm package @picmo/renderer-twemoji receives a total of 1,032 weekly downloads. As such, @picmo/renderer-twemoji popularity was classified as popular.
We found that @picmo/renderer-twemoji demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.