Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Combokeys is a JavaScript library for handling keyboard shortcuts in the browser.
It is licensed under the Apache 2.0 license.
It is around 3.3kb minified and gzipped and 9.9kb minified, has no external dependencies, and has been tested in the following browsers:
It has support for keypress
, keydown
, and keyup
events on specific keys, keyboard combinations, or key sequences.
This project was forked from ccampbell/mousetrap.
It was forked because pull–requests were not being reviewed.
This fork's author intends to review pull–requests.
Main changes are
document
. Instead, it is now a constructor and the element on which to listen must be provided on instantiation. Multiple instances possible.Get it on your page:
var Combokeys;
Combokeys = require("combokeys");
Instantiate it for the entire page:
var combokeys = new Combokeys(document.documentElement);
Or, instantiate it for one or more specific elements:
var firstCombokeys = new Combokeys(document.getElementById("first"));
var secondCombokeys = new Combokeys(document.getElementById("second"));
Add some combos!
// single keys
combokeys.bind('4', function() { console.log('4'); });
firstCombokeys.bind("?", function() { console.log('show shortcuts!'); });
secondCombokeys.bind('esc', function() { console.log('escape'); }, 'keyup');
// combinations
combokeys.bind('command+shift+k', function() { console.log('command shift k'); });
// map multiple combinations to the same callback
combokeys.bind(['command+k', 'ctrl+k'], function() {
console.log('command k or control k');
// return false to prevent default browser behavior
// and stop event from bubbling
return false;
});
// gmail style sequences
combokeys.bind('g i', function() { console.log('go to inbox'); });
combokeys.bind('* a', function() { console.log('select all'); });
// any character (actual character inserted—triggered by the `keypress` event)
combokeys.bind('any-character', function () { console.log('some visual feedback') });
// konami code!
combokeys.bind('up up down down left right left right b a enter', function() {
console.log('konami code');
});
When you’re done with it, detach:
combokeys.detach()
// and it will not listen on the element any more
You can also bind the plus and minus keys conveniently:
combokeys.bind(['mod+plus', 'mod+minus'], function(e) {
e.preventDefault();
console.log("Override browser zoom!");
});
There are a number of other similar libraries out there so what makes this one different?
keydown
events (You can specify keypress
, keydown
, or keyup
or let Combokeys choose for you).?
or *
without having to specify shift+/
or shift+8
which are not consistent across all keyboardstrigger()
methodYou can also build an AMD-compatible version by running npm run build
. This creates a universally compatible dist/combokeys.js
which, you can use via RequireJS, or include directly in a <script>
tag with the global variable Combokeys
.
The most complete documentation is currently at Mousetrap, the original project's website. At the time of this writing, the only differences are in how you get it in your page (It is now a CommonJS module which does not define a global for itself) and that you must instantiate it before binding keys.
The public API consists of .bind
, .unbind
, .trigger
, .stopCallback
, .detach
and .reset
.
There are some plugins. See their individual readme files.
Allows you to make multiple bindings in a single Combokeys.bind
call.
Allows you to set global bindings that work even inside of input fields.
Allows you to temporarily prevent Combokeys events from firing.
Allows you to capture a keyboard shortcut or sequence defined by a user.
FAQs
Handles keyboard shortcuts in the browser
We found that combokeys demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.