Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@use-it/event-listener
Advanced tools
A custom React Hook that provides a declarative useEventListener.
This hook was inspired by Dan Abramov's blog post "Making setInterval Declarative with React Hooks".
I needed a way to simplify the plumbing around adding and removing an event listener in a custom hook. That lead to a chain of tweets between Dan and myself.
$ npm i @use-it/event-listener
or
$ yarn add @use-it/event-listener
Here is a basic setup.
useEventListener(eventName, handler, element, options);
Here are the parameters that you can use. (* = optional)
Parameter | Description |
---|---|
eventName | The event name (string). Here is a list of common events. |
handler | A function that will be called whenever eventName fires on element . |
element * | An optional element to listen on. Defaults to global (i.e., window ). |
options * | An object { capture?: boolean, passive?: boolean, once?: boolean } to be passed to addEventListener . For advanced use cases. See MDN for details. |
This hook returns nothing.
Let's look at some sample code. Suppose you would like to track the mouse position. You could subscribe to mouse move events with like this.
const useMouseMove = () => {
const [coords, setCoords] = useState([0, 0]);
useEffect(() => {
const handler = ({ clientX, clientY }) => {
setCoords([clientX, clientY]);
};
window.addEventListener('mousemove', handler);
return () => {
window.removeEventListener('mousemove', handler);
};
}, []);
return coords;
};
Here we're using useEffect
to roll our own handler add/remove event listener.
useEventListener
abstracts this away. You only need to care about the event name
and the handler function.
const useMouseMove = () => {
const [coords, setCoords] = useState([0, 0]);
useEventListener('mousemove', ({ clientX, clientY }) => {
setCoords([clientX, clientY]);
});
return coords;
};
You can view/edit the sample code above on CodeSandbox.
MIT Licensed
Thanks goes to these wonderful people (emoji key):
Donavon West 🚇 ⚠️ 💡 🤔 🚧 👀 🔧 💻 | Kevin Kipp 💻 | Justin Hall 💻 📖 | Jeow Li Huan 👀 | Norman Rzepka 🤔 | Beer van der Drift ⚠️ 💻 | clingsoft 💻 |
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
A custom React Hook that provides a useEventListener.
We found that @use-it/event-listener demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.