
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@workday/canvas-kit-react-avatar
Advanced tools
A component showing a user's photo with a circular crop.
yarn add @workday/canvas-kit-react
or
yarn add @workday/canvas-kit-react-avatar
import * as React from 'react';
import {Avatar, AvatarVariant} from '@workday/canvas-kit-react-avatar';
// Basic button with click handler
<Avatar onClick={someFunction} />
// Rendering as a div instead of a button
<Avatar as="div" />
// Using static properties on Avatar
<Avatar
size={Avatar.Size.xs}
variant={Avatar.Variant.Dark}
/>
// Using AvatarVariant import directly
<Avatar size={Avatar.Size.xs} variant={AvatarVariant.Dark} />
variant: AvatarVariant<Avatar variant={Avatar.Variant.Dark} />
Size: SystemIconCircleSize | number<Avatar size={Avatar.Size.xs} />
// Custom Size.
// Note: Please use the predefined sizes as it works nicely with the Canvas Design System
<Avatar size={48} />
None
variant: AvatarVariantThe variant of the avatar if using a default image.
Default: AvatarVariant.Light
| Variant | Description |
|---|---|
Light | Light grey background, dark icon |
Dark | Dark blue background, white icon |
size: SystemIconCircleSize | numberThe diameter of the avatar in pixels
Default: Avatar.Size.m
| Name | Size (px) |
|---|---|
xs | 16 |
s | 24 |
m | 32 |
l | 40 |
xl | 64 |
xxl | 120 |
altText: stringText describing what the avatar is showing.
url: stringThe URL of the user's photo. Expects a square (1:1) photo.
ref: React.Ref<HTMLButtonElement>A ref to the underlying
<button>or<div>element.
as: 'div'Option to display the avatar as a div instead of a button.
FAQs
A circular user photo (or a default)
The npm package @workday/canvas-kit-react-avatar receives a total of 36 weekly downloads. As such, @workday/canvas-kit-react-avatar popularity was classified as not popular.
We found that @workday/canvas-kit-react-avatar demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.