Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
range-slider-wc
Advanced tools
A dependency-free, two-thumb range input slider built with Web Components.
A dependency-free, two-thumb range input slider built with Web Components.
View demo on Code Pen.
If using a bundler like Webpack or ESBuild, install using your favourite package manager:
$ yarn add range-slider-wc
then import into your project:
import rangeSlider from 'range-slider-wc';
Or, import directly into your HTML as a module script:
<script type="module" src="https://cdn.skypack.dev/range-slider-wc"></script>
This slider uses the browser-native Web Components APIs to create a Custom Element, <range-slider>
.
To use, simply include the custom element as you would a regular HTML tag:
<range-slider class="example" min="0" max="100" step="1"></range-slider>
Initial values for the thumb positions (valueMin
and valueMax
) can be set by including those attributes in the HTML:
<range-slider class="example" min="0" max="100" step="1" valueMin="10" valueMax="90"></range-slider>
This component replicates many of the same APIs as the HTML input[type="range"]
element:
const slider = document.querySelector('range-slider');
// Disable or enable the slider
slider.disabled = true;
slider.disabled = false;
// Disabled can also be set using the attribute
slider.setAttribute('disabled', '');
slider.setAttribute('disabled', 'false');
// Change the `min` or `max` values
slider.min = 10;
slider.max = 150;
// Set the `valueMin` or `valueMax`
slider.valueMin = 5;
slider.valueMax = 50;
// Check that the slider has initialised
slider.ready; // boolean
The slider emits three types of events that use the standard EventListener
interface:
const slider = document.querySelector('range-slider');
// Ready – fired when the slider is initialised
slider.addEventListener('ready', (evt) => console.log('Slider ready', evt.detail));
// Input – fired when either slider thumb is moved
slider.addEventListener('input', (evt) => console.log('Input', evt.detail));
// Change – fired after the slider thumb movement has been committed (un-focused)
slider.addEventListener('change', (evt) => console.log('Change', evt.detail));
Note: as with the native
input[type="range"]
,input
events are not fired whenvalueMin
orvalueMax
are set via the JS API.change
events will be fired in those cases as expected.
For all three event types, Event.detail
returns an object with the following interface:
{
min: Number,
max: Number,
step: Number,
valueMin: Number,
valueMax: Number,
}
By default, the slider attempts to replicate the Google Chrome range input styling. CSS variables make it easy to override these default styles to match your preferred design.
An example stylesheet is shown below with default values:
.example {
display: inline-block;
margin: 2px;
width: 129px;
--track-height: 0.5rem;
--thumb-diameter: 1rem;
--track-color: rgb(239, 239, 239);
--track-color-active: rgb(229, 229, 229);
--track-color-disabled: rgb(250, 250, 250);
--progress-color: rgb(0, 117, 255);
--progress-color-active: rgb(0, 92, 200);
--progress-color-disabled: rgb(203, 203, 203);
--thumb-color: rgb(0, 117, 255);
--thumb-color-active: rgb(0, 92, 200);
--thumb-color-disabled: rgb(203, 203, 203);
--thumb-halo-color: rgba(0, 92, 200, 0.1);
--thumb-halo-size: 0.425rem;
--focus-outline: 1px solid black;
--focus-outline-offset: 0px;
--transition-duration: 100ms;
--transition-timing-function: ease-in;
}
The main index.js
export is written using very modern JS syntax including private Class fields and methods. When importing this package into a bundler such as Webpack or Parcel (and others), the transpilation will be handled by your bundler for your supported browser targets.
Similarly, modern JS CDNs such as SkyPack and ESM.sh will transpile for browsers automatically based on request headers.
FAQs
A dependency-free, two-thumb range input slider built with Web Components.
The npm package range-slider-wc receives a total of 70 weekly downloads. As such, range-slider-wc popularity was classified as not popular.
We found that range-slider-wc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.