
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
A tiny (96B) library for serializing Object values to Strings.
This module's intended use is for converting an Object with CSS class names (as keys) to a space-delimited className
string. Other modules have similar goals (like classnames
), but obj-str
only does one thing. This is why it's only 100 bytes gzipped!
PS: I made this because Preact 8.0 removed this built-in behavior and I wanted a quick, drop-in replacement.
$ npm install --save obj-str
import objstr from 'obj-str';
objstr({ foo:true, bar:false, baz:isTrue() });
//=> 'foo baz'
With React (or any of the React-like libraries!), you can take advantage of any props
or state
values in order to express conditional classes as an object.
import React from 'react';
import objstr from 'obj-str';
const TodoItem = ({ text, isDone, disabled }) => (
<li className={ objstr({ item:true, completed:isDone, disabled }) }>
<input type="checkbox" disabled={ disabled } checked={ isDone } />
<label>{ text }</label>
</li>
);
For simple use, the React example will work for Preact too. However, you may also define a custom vNode "polyfill" to automatically handle Objects when used inside className
.
Note: For users of Preact 7.1 and below, you do not need this module! Your version includes this behavior out of the box!
import objstr from 'obj-str';
import { options } from 'preact';
const old = options.vnode;
options.vnode = vnode => {
const props = vnode.attributes;
if (props != null) {
const k = 'class' in props ? 'class' : 'className';
if (props[k] && typeof props[k]=='object') {
props[k] = objstr(props[k]);
}
}
old && old(vnode);
}
Type: Object
A hashmap of keys & their truthy/falsey values. Booleans are preferred when speed is critically important.
babel-plugin-optimize-obj-str - Babel plugin to transform obj-str
calls into optimized expressions.
clsx - Drop-in replacement for obj-str
and classnames
– handles all (and multiple) input types.
MIT © Luke Edwards
FAQs
A tiny library for serializing Object values to Strings.
The npm package obj-str receives a total of 2,121 weekly downloads. As such, obj-str popularity was classified as popular.
We found that obj-str demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.