Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
auto-marquee
Advanced tools
npm i auto-marquee
文本未充满容器时,展示文本;文本超出容器时,自动进行跑马灯展示
参数 | 类型 | 默认值 | 描述 |
---|---|---|---|
value | String | 空字符串 | 线上文件的url |
type | String | auto | auto : 文本过长时自动进行跑马灯效果 hover: 鼠标悬浮时,过长的文本才进行跑马灯效果 |
time | String/Number | 10s | 为animation-duration的值,数值越大,文字速度越慢 |
bg | String | #fff | 背景色,如果项目有主题切换功能,需要考虑为 bg 动态赋值 |
点击查看 线上演示.
vue2 vue3
<script setup>
import {reactive} from "vue";
import AutoMarquee from 'auto-marquee';
const state = reactive({
text:'计算机语言',
});
</script>
<template>
<auto-marquee :value="state.text"></auto-marquee>
</template>
FAQs
displays text for a short time, and auto uses marquee for a long time
The npm package auto-marquee receives a total of 8 weekly downloads. As such, auto-marquee popularity was classified as not popular.
We found that auto-marquee demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.