
Security Fundamentals
Turtles, Clams, and Cyber Threat Actors: Shell Usage
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
@twilio-paste/button
Advanced tools
A Button is a clickable element which communicates that users can trigger an action.
yarn add @twilio-paste/button
import {Button} from '@twilio-paste/button';
<Button variant="secondary" size="small" onClick={() => {}}>
Submit
</Button>;
Prop | Type | Description | Default |
---|---|---|---|
type? | string | If the button is inside a <form> : use 'submit'. Otherwise use 'button' (default). | 'button' |
as? | string | The HTML tag to replace the default <button> tag. | 'button' |
href? | string | A URL to route to. Must use as="a" for this prop to work. | null |
variant? | ButtonVariants | 'primary', 'secondary', 'destructive', 'destructive_link', 'link', 'reset' | 'primary' |
size? | ButtonSizes | 'default', 'small', 'icon', 'reset' | 'default' |
fullWidth | boolean | Sets the button width to 100% of the parent container. | false |
disabled? | boolean | Prevent actions from firing on this button | false |
loading? | boolean | Prevent actions and show a loading spinner | false |
onClick? | (event: React.MouseEvent) | null | |
onMouseDown? | (event: React.MouseEvent) | null | |
onMouseUp? | (event: React.MouseEvent) | null | |
onMouseEnter? | (event: React.MouseEvent) | null | |
onMouseLeave? | (event: React.MouseEvent) | null | |
onFocus? | (event: React.FocusEvent) | null | |
onBlur? | (event: React.FocusEvent) | null | |
aria-expanded? | boolean | A11y: For accordions | null |
aria-haspopup? | {'true', 'dialog', 'menu'} | A11y: For modals and menus | null |
aria-controls? | string | A11y: For modals and menus | null |
data-test? | string | To detect the element to run tests against. | null |
btnStyle
prop is renamed to variant
. The new values are:
btnSize
prop is renamed to size
. The new values are:
ButtonPlus
component has been deprecated.FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Security News
At VulnCon 2025, NIST scrapped its NVD consortium plans, admitted it can't keep up with CVEs, and outlined automation efforts amid a mounting backlog.
Product
We redesigned our GitHub PR comments to deliver clear, actionable security insights without adding noise to your workflow.