
Product
Introducing the Alert Details Page: A Better Way to Explore Alerts
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.
move-priority
Advanced tools
Currently under development, so use it on your own risk
This library attaches event listeners to an element and does some calculations, to support drag and drop and gesture interactions. However, the main purpose is, to detect if such an interaction already happens inside the element and then reject the one with less priority.
I'm aware that it would be common, to achieve this by calling event.stopPropagation().
However, I was in the situation, that it had to be done very often.
For example, if you have pages, you can swipe between them and the content can be arbitrary.
So also drag and drop, small games, anything else is possible
and not even done by yourself.
This library covers 90% of the cases
where to call event.stopPropagation().
So it decides if an interaction makes sense,
then it does some calculations
and triggers registered callback functions.
If it doesn't work as excpected, you can still cancel the event the "old" way.
npm install move-priority
As first parameter it expects an element or a selector like .my-element.
The second argument is an object with options, explained below
import MovePriority from 'move-priority';
new MovePriority(document.querySelector('#element'), {
onMove() {
// Detected mousemove/pointermove inside the element.
// There is no other interaction inside the element!
},
});
FAQs
**Currently under development, so use it on your own risk**
We found that move-priority demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.

Product
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.