Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
friend-selector
Advanced tools
A friend selector in Javascript
Put an empty div
for FS to do its dirty business in:
<div data-friend-selector=""></div>
Set a callback and maybe some options:
FriendSelector.options({
selectCallback: function(friend){
console.log("You selected " + friend.name + " who has id: " friend.id)
}
})
And have it launched:
$("#foo").click(function(){
FriendSelector.launch()
}
That's pretty much it.
Find builds in the build/
folder.
friend-selector.js
: Standalone buildfriend-selector.min.js
: Standalone minified buildfriend-selector.all.js
: With FBLogin bundledfriend-selector.all.min.js
: With FBLogin bundled, minifiedDefault: function(friend){}
Called when user has made a selection. friend
is an object
with properties name
and id
(which corresponds to an
element of the array of the response to FB.api('/me/friends')
)
Example: friend = {name: "Max Power", id: 4294967296}
Default: true
Determines what happens when the user selects a friend.
Setting it to false
will hide the Choose button, and
trigger selectCallback
as soon as the friend is clicked on.
Default:
{
title: 'Choose a friend',
confirm: 'Choose',
loading: 'Loading...',
noFriends: 'No friends are using this app yet.'
}
Dictionary of strings displayed to the user. Useful for I18n.
Default: '[data-friend-selector]'
Selector for the empty element Friend Selector will make its nest in.
Default: 10
Maximum number of friends displayed per selector page.
Yes.
FAQs
A plugin to select a friend from Facebook
The npm package friend-selector receives a total of 0 weekly downloads. As such, friend-selector popularity was classified as not popular.
We found that friend-selector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.