
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@react-types/listbox
Advanced tools
This package is part of react-spectrum. See the repo for more details.
A React Spectrum types package for menu-related props. Like this package, it supplies TypeScript contracts rather than a complete interactive component; it covers menus rather than listboxes.
A React Spectrum types package for comboboxes. It similarly provides type definitions, but for an input-and-options pattern that can include filtering and text entry.
A React Aria package that provides accessibility behavior and hooks for listboxes. Unlike this types-only package, it supplies runtime behavior for building an accessible listbox, while leaving the rendered UI to the application.
A component and hook library that includes accessible listbox primitives. Unlike this package, it offers runtime building blocks as well as TypeScript support, rather than only listbox type definitions.
FAQs
Spectrum UI components in React
The npm package @react-types/listbox receives a total of 1,423,243 weekly downloads. As such, @react-types/listbox popularity was classified as popular.
We found that @react-types/listbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.