
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
rax-canvas
Advanced tools
Web / Weex / 阿里小程序 / 微信小程序 / 字节跳动小程序
画布组件.
$ npm install rax-canvas --save
属性 | 类型 | 默认值 | 必填 | 描述 | 支持 |
---|---|---|---|---|---|
style | object | - | ✘ | 通过内联的方式设置画布样式 | |
className | object | - | ✘ | 设置画布的样式 | |
width | number | 0 | ✘ | 设置画布的宽度 | |
height | number | 0 | ✘ | 设置画布的高度 | |
onClick | function | - | ✘ | 点击画布时触发的事件 | |
onLongPress | function | - | ✘ | 长按画布时触发的事件 | |
onTouchStart | function | - | ✘ | 触摸画布时触发的事件 | |
onTouchMove | function | - | ✘ | 手指在画布上移动时触发的事件 | |
onTouchEnd | function | - | ✘ | 结束触摸时触发的事件 | |
onTouchCancel | function | - | ✘ | 触摸事件取消的时候触发的事件 |
返回画布实例。
type 默认值为 2d
,目前在小程序中暂不支持设置。
由于微信小程序新接口获取 canvas context
是一个异步行为,如果想获得设置 2d
/webgl
的能力,则不能使用 getContext
方法,需要用户自己兼容处理,具体详见微信小程序文档 https://developers.weixin.qq.com/miniprogram/dev/component/canvas.html。
直接指定 width
或者 height
的优先级高于在 style
和 className
中指定的宽高。
import { createElement, Component, render, createRef } from 'rax';
import Canvas from 'rax-canvas';
import DriverUniversal from "driver-universal"
class CanvasSample extends Component {
constructor(props) {
super(props);
this.raxCanvasDemo = createRef()
}
componentDidMount() {
const context = this.raxCanvasDemo.current.getContext();
context.fillStyle = 'red';
context.fillRect(0, 0, 100, 100);
}
render() {
return <Canvas style={{
width: 750,
height: 750
}} ref={this.raxCanvasDemo} />;
}
}
render(<CanvasSample />, document.body, { driver: DriverUniversal });
FAQs
Canvas for Rax.
We found that rax-canvas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.