Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
boundless-button
Advanced tools
A control with "pressed" state support.
Button has two modes of operation:
stateless (like a normal <button>
)
<Button onPressed={doSomething}>foo</Button>
Note that instead of
onClick
, Button usesonPressed
. This is because the component also listens for keyboard Enter events, soonClick
only tells half the story. You can still bind to that particular React event though if there's a need to tell the difference between clicks and Enter presses.
stateful (like a toggle, e.g. bold-mode in a rich text editor)
"stateful" mode is triggered by passing a boolean to props.pressed
. This enables the button to act like a controlled component. The onUnpressed
event callback will also now be fired when appropriate.
<Button
pressed={true}
onPressed={doSomething}
onUnpressed={doSomethingElse}>
foo
</Button>
import React from 'react';
import Button from '../index';
export default class ButtonDemo extends React.PureComponent {
state = {
pressed: false,
}
handleClick = () => {
// eslint-disable-next-line no-alert
alert('A single-click was detected.');
}
handlePressed = () => {
this.setState({pressed: true});
}
handleUnpressed = () => {
this.setState({pressed: false});
}
render() {
return (
<div>
<Button onPressed={this.handleClick}>
Click Me
</Button>
<Button
onPressed={this.handlePressed}
onUnpressed={this.handleUnpressed}
pressed={this.state.pressed}>
{this.state.pressed ? 'Pressed' : 'Unpressed'}
</Button>
<Button
onPressed={this.handleClick}
disabled={true}>
Disabled
</Button>
</div>
);
}
}
Note: only top-level props are in the README, for the full list check out the website.
There are no required props.
*
・ any React-supported attribute
Expects | Default Value
| -
any
| n/a
component
・ any valid HTML tag name or a ReactComponent, anything that can be passed as the
first argument to React.createElement
; note that this component sets the role
and aria-checked
attributes so non-<button>
elements will still behave like a button for screen readers
Expects | Default Value
| -
string or function
| 'button'
onPressed
・ use this callback instead of onClick
(it's onClick
+ onKeyDown:Enter
); fires for both button modes
Expects | Default Value
| -
function
| () => {}
onUnpressed
・ called when the element becomes "unpressed"; only fires when the Button is in stateful mode
Expects | Default Value
| -
function
| () => {}
pressed
・ passthrough to aria-pressed
; using this prop turns on the onUnpressed
callback when applicable
Expects | Default Value
| -
bool
| undefined
// Bring in Boundless's base Stylus variables
@require "node_modules/boundless-button/variables"
// Redefine any variables as desired, e.g.
color-accent = royalblue
// Bring in the component styles; they will be autoconfigured based on the above
@require "node_modules/boundless-button/style"
If desired, a precompiled plain CSS stylesheet is available for customization at /build/style.css
, based on Boundless's default variables.
FAQs
A control with "pressed" state support.
The npm package boundless-button receives a total of 1 weekly downloads. As such, boundless-button popularity was classified as not popular.
We found that boundless-button demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.