
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@unplugstudio/droppy
Advanced tools
Simple, accessible, nested dropdow menus. Inspired by Bootstrap dropdowns.
Supports TAB navigation, Space/Enter to toggle the dropdowns, Esc to close. All positioning is done via CSS, so it can easily be converted to accordions / drawers for mobile users.
No dependencies. Less than 4 KB minified, less than 2 KB gzipped.
Open demo.html for a complete demo.
You can include Droppy directly in your document:
<script src="lib/droppy.min.js">
<script>
droppy.Droppy(...)
droppy.init(...)
<script>
You can also install from git and consume as a ES6 module:
npm install git+https://gitlab.com/jerivas/droppy.git
import Droppy, { init } from 'droppy'
<button data-toggle="dropdown" aria-controls="dropdown-1">
Open dropdown
</button>
<ul id="dropdown-1">
<li><a href="#">Item 1</a></li>
<li><a href="#">Item 2</a></li>
<li><a href="#">Item 3</a></li>
</ul>
<script>
// Single element
var btn = document.querySelector('[data-toggle="dropdown"]')
var myDroppy = new droppy.Droppy(btn)
// OR: All elements with [data-toggle="dropdown"] in one go
droppy.init()
</script>
data-toggle="dropdown" to the button<ul> and pass it to aria-controls on the buttonbuttonopen will be added to the dropdown (you can pass a custom class to init and Droppy as the second argument)aria-expanded attribute will be toggled on the buttonshow.droppyshown.droppyhide.droppyhidden.droppy
On each event you'll have access to the dropdown as event.target and the button as event.detail.relatedTargetFAQs
Simple, accessible, nested dropdown menus
We found that @unplugstudio/droppy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.