
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@uandi/vue-datetime
Advanced tools
Mobile friendly datetime picker for Vue. Supports date, datetime and time modes, i18n and disabling dates.
Mobile friendly datetime picker for Vue. Supports date, datetime and time modes, i18n and disabling dates.
NOTICE: This README is related to next version (1.x) of vue-datetime. For the old release 0.x, see here.
v1.x currently support most of v0.x functionality but it's still behind.
Old features not yet implemented:
yarn add luxon vue-datetime weekstart
Or
npm install --save luxon vue-datetime weekstart
weekstart is optional, is used to get the first day of the week.
import Vue from 'vue'
import Datetime from 'vue-datetime'
// You need a specific loader for CSS files
import 'vue-datetime/dist/vue-datetime.css'
Vue.use(Datetime)
import { Datetime } from 'vue-datetime';
Vue.component('datetime', Datetime);
import { Datetime } from 'vue-datetime';
Vue.extend({
template: '...',
components: {
datetime: Datetime
}
});
Download vue, luxon, weekstart and vue-datetime or use a CDN like unpkg.
<link rel="stylesheet" href="vue-datetime.css"></link>
<script src="vue.js"></script>
<script src="luxon.js"></script>
<script src="weekstart.js"></script>
<script src="vue-datetime.js"></script>
weekstart is optional, is used to get the first day of the week.
<datetime v-model="date"></datetime>
| Parameter | Type | Default | Description |
|---|---|---|---|
| v-model (required) | ISO 8601 String | - | Datetime. |
| type | String | date | Picker type. date or datetime. |
| input-id | String | '' | Id for the input. |
| input-class | String | '' | Class for the input. |
| hidden-name | String | null | Name for hidden input with raw value. See #51. |
| value-zone | String | UTC | Time zone for the value. |
| zone | String | local | Time zone for the picker. |
| format | Object or String | DateTime.DATE_MED or DateTime.DATETIME_MED | Input date format. Luxon presents or tokens. |
| phrases | Object | {ok: 'Ok', cancel: 'Cancel'} | Phrases. |
| use12-hour | Boolean | false | Display 12 hour (AM/PM) mode |
| hour-step | Number | 1 | Hour step. |
| minute-step | Number | 1 | Minute step. |
| min-datetime | ISO 8601 String | null | Minimum datetime. |
| max-datetime | ISO 8601 String | null | Maximum datetime. |
| auto | Boolean | false | Auto continue/close on select. |
| week-start | Number | auto from locale if weekstart is available or 1 | First day of the week. 1 is Monday and 7 is Sunday. |
Input inherits all props not defined above but style and class will be inherited by root element.
The component is based on Luxon, check out documentation to set time zones and format.
Date internationalization depends on luxon. Set the default locale.
import { Settings } from 'luxon'
Settings.defaultLocale = 'es'
Component emits the input event to work with v-model. More info.
close event is emitted when the popup closes.
Also, input text inherits all component events.
Theming is supported by overwriting CSS classes.
yarn test
yarn dev
Bundle the js and css to the dist folder:
yarn build
FAQs
Mobile friendly datetime picker for Vue. Supports date, datetime and time modes, i18n and disabling dates.
We found that @uandi/vue-datetime demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.