
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
nuke-list-view
Advanced tools
用于展现一个数据列表,和 ScrollView
不同,ListView
使用 weex list 组件内存回收复用的能力,达到复用 cell 不卡顿的效果。
属性 | 说明 | 类型 | 默认值 |
---|---|---|---|
renderHeader | 头部 | function | 无 |
renderFooter | 底部 | function | 无 |
renderRow | 渲染单行的方法 | function | 无 |
dataSource | 数据源 | array | 无 |
onEndReached | 加载到底部时触发 的事件 | 原 onloadmore 事件 | 无 |
onEndReachedThreshold | 加载更多的位移量 | string | 500 |
showScrollbar | 是否显示滚动条 | bool | 无 |
resetLoadmore | 实例方法,用于再次触发 loadmore [以下单独说明] | function | 无 |
这是一个重置 onEndReached 是否能触发的
标记位的方法。
当 onEndReached 触发后,如果页面内容没有变长,或者反而变短了,下次再滑动到底部,onEndReached 不会被触发了。此时调用 resetLoadmore ,可以清除内置标记位,让 onEndReached 可以再次触发。
// 调用 resetLoadmore 以保证上一次加载不到数据后,下次还能继续触发 onEndReached
reset=(e)=>{
this.refs.mylist.resetLoadmore();
}
render(){
return (
<ListView ref="mylist"
renderHeader={this.renderHeader}
renderFooter={this.renderFooter}
renderRow={this.renderItem}
dataSource={this.state.data}
/>
)
}
FAQs
The npm package nuke-list-view receives a total of 2 weekly downloads. As such, nuke-list-view popularity was classified as not popular.
We found that nuke-list-view demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.