
Product
Introducing Reachability for PHP
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.
#Key
Key is a tiny little keycode library for your browser. It makes keybound event assertions super simple.
###Example
Here's how key can work together with a DOM query library like jQuery to navigate through a [pseudo] image gallery.
var gallery = new GalleryOfAwesome();
$(window).on('keyup', function(event) {
if (key.is(key.code.arrow.left, event.which)) {
gallery.navigateLeft();
} else if (key.is(key.code.arrow.right, event.which)) {
gallery.navigateRight();
} else if (key.is(key.code.special.esc, event.which)) {
gallery.close();
}
});
You can even assert against a collection of keys, not just a specific key.
var input = $('input[type="text"]');
input.on('keydown', function (event) {
if (key.is(key.code.punctuation, event.which)) {
event.preventDefault();
window.alert('No punctuation allowed!');
}
});
###Usage
var key = window.key; // In browser
var key = require('key'); // Or package manager
###Installation
npm install key<script src="path/to/key/build/key.min.js"></script>###License
The content of this library is released under the MIT License by Andrew Lawson.
You can find a copy of this license at http://www.opensource.org/licenses/mit
FAQs
A tiny little keycode library
The npm package key receives a total of 2,058 weekly downloads. As such, key popularity was classified as popular.
We found that key demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.

Product
Export Socket alert data to your own cloud storage in JSON, CSV, or Parquet, with flexible snapshot or incremental delivery.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.