
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
@xme-react/file-list
Advanced tools
| 参数 | 类型 | 备注 |
|---|---|---|
| cls | String | 文件项的class,覆盖默认样式 |
| toEach | Array | 必填数据列表 |
| toEach[0].icon | String | 文件图标,不传默认使用文件名后缀 |
| toEach[0].name | String | 必填文件名 |
| toEach[0].size | Number | 文件大小,单位B |
| toEach[0].onDelete | Function | 删除此文件的回调,用于覆盖通用的删除回调 |
| toEach[0].downloadable | Bool | 是否可以下载此文件,用于覆盖通用的下载设置 |
| toEach[0].downloadUrl | String | 下载文件的url ,如果设置了可下载,但是没有下载url,不会显示下载按钮 |
| onDelete | Function | 通用的删除回调,如果没有文件列表中的文件有特殊的删除需求,可以直接通过此配置设置删除回调 |
| downloadable | Bool | 通用的是否可下载配置,如果文件列表有统一的下载配置,可以通过设置此配置 |
import React from 'react'
import ReactDOM from 'react-dom'
import FileList from '@xm/FileList'
const DATA = [
{
name: 'very long long long long long long long long long long long long long long long long file name with jpg ext.jpg',
size: 100000,
icon: 'https://filesystem.api.jituancaiyun.com/sfs/avatar?uid=106096&isThumb=1&_=1505266816141',
downloadUrl: 'http://filesystem.api.jituancaiyun.com/sfs/file?digest=2ca7fe608b2c11775245dd71887a8e59&token=daa1df7855acd5f79d6a363e79197430&ts=1505266815875073&uid=10101001191214848&image.png'
},
{
name: '中文名字.pdf',
size: 88888888,
downloadable: false,
downloadUrl: 'http://filesystem.api.jituancaiyun.com/sfs/file?digest=2ca7fe608b2c11775245dd71887a8e59&token=daa1df7855acd5f79d6a363e79197430&ts=1505266815875073&uid=10101001191214848&image.png'
},
{
name: '文件夹',
size: 11111111111111111,
onDelete: false,
downloadUrl: 'http://filesystem.api.jituancaiyun.com/sfs/file?digest=2ca7fe608b2c11775245dd71887a8e59&token=daa1df7855acd5f79d6a363e79197430&ts=1505266815875073&uid=10101001191214848&image.png'
},
{
name: '特殊定制关闭按钮回调',
size: 111,
onDelete: p => console.log('custom delete', p),
downloadUrl: 'http://filesystem.api.jituancaiyun.com/sfs/file?digest=2ca7fe608b2c11775245dd71887a8e59&token=daa1df7855acd5f79d6a363e79197430&ts=1505266815875073&uid=10101001191214848&image.png'
}
]
window.addEventListener('DOMContentLoaded', () => {
ReactDOM.render(
<FileList toEach={DATA} downloadable onDelete={p => console.log(p)} />,
document.body
)
})
FAQs
We found that @xme-react/file-list demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.