
Company News
Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.
@skillnull/drage-js
Advanced tools
CDN
使用 UMD 格式
<script src="https://www.unpkg.com/@skillnull/drage-js@0.0.4/dist/drage.js"></script>
# or
<script src="https://cdn.jsdelivr.net/npm/@skillnull/drage-js@0.0.4/dist/drage.js"></script>
使用 ES 格式
<script src="https://www.unpkg.com/@skillnull/drage-js@0.0.4/dist/drage.es.js" type="module"></script>
# or
<script src="https://cdn.jsdelivr.net/npm/@skillnull/drage-js@0.0.4/dist/drage.es.js" type="module"></script>
安装
# NPM or YARN
yarn add @skillnull/drage-js
# or with npm
npm install @skillnull/drage-js
调用
// 使用 CDN 引用时,无需 import
import Drage from '@skillnull/drage-js'
/**
* 启用拖拽
* @param ref <HTMLElement> [必需]
* @param style <Object> [非必需,默认值: {}]
* @param setStorage <String> session(当前窗口关闭前有效,不共享) | local(持久有效,同源窗口共享) [非必需,默认值: 'local']
*/
Drage.listen({
ref: HTMLElement,
style: {},
setStorage: 'local'
})
// 删除 storage
Drage.storageHandle('remove')
// 停用拖拽
Drage.removeListen()
FAQs
The npm package @skillnull/drage-js receives a total of 6 weekly downloads. As such, @skillnull/drage-js popularity was classified as not popular.
We found that @skillnull/drage-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.

Research
/Security News
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.

Research
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.