Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
boundless-input
Advanced tools
An input control with placeholder emulation for non-supporting platforms.
THIS IS AN AUTOGENERATED FILE. EDIT INDEX.JS INSTEAD.
An input control with placeholder emulation for non-supporting platforms.
Input abstracts away the cross-platform differences of placeholder styling and behaviors, for example: Internet Explorer dismisses native placeholders on input focus and other platforms do not. This component ensures that text input controls will feel and behave similarly on more devices.
When using Input
in your project, you may call the following methods on a rendered instance of the component. Use refs
to get the instance.
getValue() returns the current value of the input field
setValue(string)
programmatically set the input value; useful for clearing out the input in "uncontrolled" mode -- note that digging into the internals and setting the refs.field.value = ''
directly will not trigger events and messes up the internal state of the component
Note: only top-level props are in the README, for the full list check out the website.
There are no required props.
Name | Type | Default Value | Description |
---|---|---|---|
hidePlaceholderOnFocus |
|
| triggers the placeholder to disappear when the input field is focused, reappears when the user has tabbed away or focus is moved |
inputProps |
|
| props to be passed through to the input node, `.b-textual-input`; this includes the standard set of React input props like `defaultValue`, `value`, `name`, `placeholder`, `autoFocus`, etc. |
FAQs
An input control with placeholder emulation for non-supporting platforms.
The npm package boundless-input receives a total of 3 weekly downloads. As such, boundless-input popularity was classified as not popular.
We found that boundless-input demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.