
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
component-picker
Advanced tools
Component picker. Date, currency, whatever. Touch, scroll and mouse friendly.
This can be used as datepicker, component picker or whatever you pass into it. It can me multiple or simple.
Here you can see a demo from this repository.
// simple Picker
var picker = new ComponentPicker(element, dataArray);
picker.onChange(function(value, i){
console.log('I changed to ', value);
});
// Date picker: see example below
var picker = new ComponentPicker(element, data array _OR_ range string);
2020-2030
so the picker will loop the numbers from 2020
to 2030
, inserting them as the content for the picker.The DatePicker Class is a 3-in-1 ComponentPicker, specialized in picking dates. It has the option to pad numbers so we always have 2 case numbers.
Usage:
new DatePicker(datepickerTarget, ['2015-2025', '1-12', '1-31']).onChange(listener);
var picker = new DatePicker(element, data array _OR_ range string <, options>);
If you make changes to the src/
folder and want to export CSS and JavaScript (as ES5 JavaScript) into the lib/
folder you can do this in the command line:
$ npm run build
FAQs
Component picker. Date, currency, whatever. Touch, scroll and mouse friendly.
We found that component-picker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.