
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@workday/canvas-kit-react-avatar
Advanced tools
A component showing a user's photo with a circular crop.
yarn add @workday/canvas-kit-react
or
yarn add @workday/canvas-kit-react-avatar
import * as React from 'react';
import {Avatar, AvatarVariant} from '@workday/canvas-kit-react-avatar';
// Basic button with click handler
<Avatar onClick={someFunction} />
// Rendering as a div instead of a button
<Avatar as="div" />
// Using static properties on Avatar
<Avatar
size={Avatar.Size.xs}
variant={Avatar.Variant.Dark}
/>
// Using AvatarVariant import directly
<Avatar size={Avatar.Size.xs} variant={AvatarVariant.Dark} />
variant: AvatarVariant<Avatar variant={Avatar.Variant.Dark} />
Size: SystemIconCircleSize | number<Avatar size={Avatar.Size.xs} />
// Custom Size.
// Note: Please use the predefined sizes as it works nicely with the Canvas Design System
<Avatar size={48} />
None
variant: AvatarVariantThe variant of the avatar if using a default image.
Default: AvatarVariant.Light
| Variant | Description |
|---|---|
Light | Light grey background, dark icon |
Dark | Dark blue background, white icon |
size: SystemIconCircleSize | numberThe diameter of the avatar in pixels
Default: Avatar.Size.m
| Name | Size (px) |
|---|---|
xs | 16 |
s | 24 |
m | 32 |
l | 40 |
xl | 64 |
xxl | 120 |
altText: stringText describing what the avatar is showing.
url: stringThe URL of the user's photo. Expects a square (1:1) photo.
ref: React.Ref<HTMLButtonElement>A ref to the underlying
<button>or<div>element.
as: 'div'Option to display the avatar as a div instead of a button.
FAQs
A circular user photo (or a default)
We found that @workday/canvas-kit-react-avatar demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.