
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
ampersand-auto-closing-view
Advanced tools
A view that closes itself after a certain period of time.
Install via npm:
npm install ampersand-auto-closing-view --save
A simple example might be to show a prompt each time the user moves his/her mouse. It could look like this:
var View = require('ampersand-view');
var ACView = require('ampersand-auto-closing-view');
// Extend the view so that we can have custom HTML instead
var MyACView = ACView.extend({
template: '<h1>Hello, world!</h1>'
});
var MyView = View.extend({
template: '<div class="container"><div class="prompt"></div></div>',
events: {
'mousemove': 'reset'
},
reset: function() {
this.acView.trigger('reset');
},
render: function() {
this.renderWithTemplate();
this.acView = new MyACView();
this.renderSubview(this.acView, '.prompt');
}
});
var myView = new MyView({ el: document.body });
myView.render();
We can go a little further with this, and keep the view persisted whilst the user has his/her mouse over our custom view:
var MyACView = ACView.extend({
template: '<h1>Hello, world!</h1>'
events: {
'mousemove': 'onMouseMove',
'mouseout' : 'onMouseOut'
},
onMouseMove: function(e) {
e.stopPropagation();
this.trigger('stay');
},
onMouseOut: function(e) {
e.stopPropagation();
this.trigger('reset');
}
});
Note that this module leaves the hide/show implementation up to you - at its most simple, you can define these two classes in your CSS file:
.hidden {
display: none;
}
.active {
display: block;
}
Or, make it look a little smoother by defining a transition between the two states:
.prompt {
position: absolute;
left: 0;
top: 0;
width: 200px;
height: 100%;
background: #222;
transition: transform .2s ease;
}
.prompt.hidden {
transform: translateX(-200px);
}
ampersand-auto-closing-view is itself an ampersand-view so you can
extend it to add additional functionality. This is recommended as this module
provides only a skeleton view which you can then fill with your own content.
Construct a new auto closing view with an options object. The following options are supported:
Number4000The duration, in milliseconds, that the element should be shown for.
StringactiveThe class name to use whilst the element is active.
StringhiddenThe class name to use whilst the element is hidden.
"Hides" the view. Note that you should supplement this with your own CSS; this is so you can animate the view in and out using CSS transitions. Does not start the timer.
"Shows" the view. Note that you should supplement this with your own CSS; this is so you can animate the view in and out using CSS transitions. Does not start the timer.
Reset the timer for the view, keeping it on screen for the duration that was
defined (default is 4 seconds). Note that you can also do
ACView.trigger('reset').
Convenience for clearing the timer and showing the view with a single method
call. Note that you can also do ACView.trigger('stay').
Clears the timeout for the view, so that you can (temporarily) override the show/hide behaviour. For example, when you mouse over the view, it could stay in place until you mouse out of it again.
Pull requests are welcome. If you add functionality, then please add unit tests to cover it.
MIT © Ben Briggs
FAQs
A view that closes itself after a certain period of time.
The npm package ampersand-auto-closing-view receives a total of 8 weekly downloads. As such, ampersand-auto-closing-view popularity was classified as not popular.
We found that ampersand-auto-closing-view demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.