Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
react-ckeditor-component
Advanced tools
React component for CKEditor
var CKEditor = require('react-ckeditor-component');
class Example extends Component {
constructor(props) {
super(props);
this.updateContent = this.updateContent.bind(this);
this.state = {
content: 'content',
}
}
updateContent(newContent) {
this.setState({
content: newContent
})
}
render() {
return (
<CKEditor content={this.state.content} onChange={this.updateContent} />
)
}
}
The package also includes an in-built example under the /example
folder.
name | type | default | mandatory | description |
---|---|---|---|---|
content | any | No | Default value to be set in CKEditor | |
onChange | function | No | Callback function to be called onChange | |
config | object | No | Configs to be passed in CKEditor | |
isScriptLoaded | boolean | false | No | Pass true if ckeditor script is already loaded in project |
scriptUrl | string | Standard CKEditor | No | The CKEditor script that needs to be loaded. Pass a custom script with plugins if you need a customized CKEditor. |
react-ckeditor-component
is released under the MIT license
.
FAQs
CKEditor component for React
The npm package react-ckeditor-component receives a total of 0 weekly downloads. As such, react-ckeditor-component popularity was classified as not popular.
We found that react-ckeditor-component demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.