
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
form-react-form
Advanced tools
npm install form-react-form
or
yarn add form-react-form
import React, { FC } from "react";
import { useForm } from "form-react-form";
import schema from "./schema";
export interface FormInput {
email: string;
password: string;
}
const Form: FC = () => {
const { values, errors, onChange, wrapSubmit } = useForm<FormInput>({
schema,
defaults: {
email: "",
password: "",
},
});
const onSubmit = wrapSubmit(async (values) => {});
return (
<form onSubmit={onSubmit}>
<input name="email" placeholder="Email" value={values.email} onChange={onChange} />
{errors.email && <span>{errors.email[0]}</span>}
<input
name="password"
type="password"
placeholder="Password"
value={values.password}
onChange={onChange}
/>
{errors.password && <span>{errors.password[0]}</span>}
<button>Login</button>
</form>
);
};
Using fastest-validator under the hood for schema validation.
export default {
email: {
type: "string",
email: true,
empty: false,
min: 2,
max: 255,
},
password: {
type: "string",
empty: false,
min: 8,
max: 64,
},
};
const { values, errors, setValues, setErrors, onChange, wrapChange, wrapSubmit } = useForm(options);
Name | Input/Output | Description |
---|---|---|
values | { [name]: value } | Object containing values of each input by name. |
errors | { [name]: string[] } | Object containing errors of each input by name. |
onChange | (event) => void (value, name) => void ({ [name]: value }) => void | Function that handles input changes. |
wrapChange | (onChange) => void | Wrapper function to have custom control over input change before value gets passed to useForm for handling. |
wrapSubmit | ((values) => void) => void | Wrapper function to have custom control over input change before value gets passed to useForm for handling. |
setValues | ({ [name]: value }) => void | Function to update values. |
setErrors | ({ [name]: string[] }) => void | Function to update errors. Commonly used in wrapSubmit to set errors sent from server. |
defaults?
: Object containing input defualt values. When not provided, initial value for each input will be undefined
sometimes making inputs uncontrolled. To avoid that, it is recomended to set defaults
, defaultValue
on html inputs or set default value
paramater on custom components.schema
: Valid schema for fastest-validator.When using forms with different input and output values you should also provide FormOutput
types because fastest-validator
unfortunately can't convert them using schema.
// ...
export interface FormInput {
age: string;
}
export interface FormOutput {
age: number;
}
const Form: FC = () => {
const { values, onChange, wrapSubmit } = useForm<FormInput, FormOutput>({
schema,
defaults: {
age: "",
},
});
const onSubmit = wrapSubmit(async (values) => {});
return (
<form onSubmit={onSubmit}>
<input name="age" placeholder="Age" value={values.age} onChange={onChange} />
<button>Set</button>
</form>
);
};
FAQs
``` npm install form-react-form ```
The npm package form-react-form receives a total of 0 weekly downloads. As such, form-react-form popularity was classified as not popular.
We found that form-react-form demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.