
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
media-query-props
Advanced tools
Customize the props you pass with the full power of native CSS media queries.
No higher-order components, no run-time resize events, full power of arbitrary media queries, fully type-checked.
<MyComponent
title="Hi, John"
titlePosition="left"
mediaQueries={{
"@media (max-width: 700px)": {
titlePosition="on-top"
}
}}
>
If you add more than one media query at once, see the mediaQueriesExclusive gotcha.
After the initial configuration described below, use this module when authoring your components. Decide which props you want to allow to customize by media queries and wrap them in the MediaQueries type. The values of these props are not limited to any css values.
import { MediaQueries } from "lib/my-media-queries";
type MyProps = {
title: string;
} & MediaQueries<{
titlePosition: "left" | "on-top";
}>;
Use these props when rendering your component using your mediaQueries helper function. It takes all props of the component and calls your callback multiple times, once for the main props and once for every passed in media query.
import { mediaQueries } from "lib/my-media-queries";
const titleClass = mediaQueries(this.props, function(props) {
return props.titlePosition === "on-top"
? {
position: "absolute",
bottom: 5
}
: {
textAlign: "left"
};
});
return (
<div>
<h1 className={titleClass}>{title}</h1>
</div>
);
If your component props are defined as a union of multiple other components, each of which has its own mediaQueries, you need to add a special type to correctly merge mediaQueries prop:
// Will not merge mediaQueries prop correctly
type Props = PropsA & PropsB;
// Will merge mediaQueries prop correctly
import { FixMerge } from "media-query-props";
type Props = FixMerge<PropsA, PropsB>;
The package is available on npm as media-query-props
.
Configure it for your CSS tooling by calling the factory function with a type parameter describing what your callback functions are supposed to return, and a function parameter transforming a list of nested style objects into a single result, most likely a class name you will apply to elements.
For an example, here is how I configure it to use with Emotion.
import { createMediaQueries } from "media-query-props";
import { CSSObject } from "create-emotion";
import { css } from "emotion";
export const mediaQueries = createMediaQueriesFunction<CSSObject>(css);
export { MediaQueries, FixMerge } from "./media-query-props";
You can customize the factory with options:
createMediaQueriesFunction<CSSObject>(css, {
// By default we prevent the users of the components from
// adding their own nested selectors to ensure the encapsulation
// of your components. Otherwise they could add nested selectors:
// ['& div p']: { display: 'none' }
// You can customize this conditional
validateMediaQuery: query => query.startsWith("@media")
});
2.0.0
FAQs
Use native CSS media queries to customize component props
The npm package media-query-props receives a total of 0 weekly downloads. As such, media-query-props popularity was classified as not popular.
We found that media-query-props demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.