
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
提示框组件,专注于带箭头的气泡框显示、隐藏、动画等交互功能。 模块内部集成了模板和样式,无须单独引用样式,可以很方便地直接使用。
注:1.2.0 版本后 Tip 模块被原来的子模块 Atip 模块所替换。
Tip 模块继承自 popup,可使用包括 overlay、widget、base、class、events、attribute、aspect 的属性和方法。
selector
触发点元素。
string
触发方式,[hover
|click
|focus
]。
string
提示内容,支持字符和 html 结构。
number
箭头位置,按钟表点位置,目前支持1、2、5、7、10、11点位置,默认 7 点钟。
string
配色主题,内置黄色、蓝色和白色三种提示框样式 [yellow
|blue
|white
],默认为 yellow
。
boolean
当弹出层显示在屏幕外时,是否自动转换浮层位置,默认为 false。
object
参照 Overlay 的 align 配置,
指定此定位参数时,认为开发者要自定义提示框位置,此时 arrowPosition
属性失效。
seajs.use(['arale/tip/{{版本号}}/tip'], function(Tip) {
new Tip({
trigger: '#test', // 触发器
content: '我是内容', // 提示框显示的内容
arrowPosition: 11 // 11点钟的箭头位置
});
});
其他用法请参见演示。
1.3.0
tag:changed
迁移到 spm@3.x
FAQs
The npm package arale-tip receives a total of 0 weekly downloads. As such, arale-tip popularity was classified as not popular.
We found that arale-tip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.