Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@uscreentv/v-color
Advanced tools
Simple color picker for
vue@2
With npm
:
npm install --save @uscreen-video/v-color
Or with yarn
:
yarn add @uscreen-video/v-color
VColorPicker
This is the main component, which just represents color picker as is.
Props
value
– Color string in hex
, rgba
or hsla
format
type: string
default value: ''
withSuggestions
– Enables colors suggestions which stores in local storage. Picker remembers 7 last colors
type: boolean
default value: true
Events
input
– Emits on each color change
VColorPopover
It includes VColorPicker
, but wrapped into popover component with control button and
current color preview. Use it when you need to save visual space.
Props
value
– Color string in hex
, rgba
or hsla
format
type: string
default value: ''
withSuggestions
– Enables colors suggestions which stores in local storage. Picker remembers 7 last colors
type: boolean
default value: true
position
– Popover's position after appearing
type: string
possible values: bottom|left|top|right
default value: bottom
Events
input -> (value: string, suggestion?: boolean)
– Emits on each color change or suggestion click
FAQs
> Simple color picker for `vue@2`
The npm package @uscreentv/v-color receives a total of 2 weekly downloads. As such, @uscreentv/v-color popularity was classified as not popular.
We found that @uscreentv/v-color demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.