
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
react-dynamic-star
Advanced tools
A Highly Customizable, easy-to-use elegant stars rating component. This component is a port of an open-source component made in vue, you can access the repo in Vue Star Rating.
yarn add react-dynamic-star
npm install react-dynamic-star
import { DynamicStar } from 'react-dynamic-star';
const App = () => {
return (
<div>
<DynamicStar rating={5} />
</div>
)
}
Property | Type | Description | Default |
---|---|---|---|
rating* | Number | A number between 0.0-totalStars that will determine the fullness of the stars rating polygons | |
outlined? | Boolean, String | Use only outlined, the stroke color will use the fullStarColor, pass the color for he the outlined color will use. | |
outlineWidth? | Number | The width for outline | |
sharpnessStar? | Number | Define the sharpness/fatness of a star | 2.5 |
totalStars? | Number | Define total of stars | 5 |
width? | Number | Define width of a star | 100 |
height? | Number | Define height of a star | 100 |
emptyStarColor? | String | Define empty color when star is not filled | transparent |
fullStarColor? | String | Define full star color when star is filled | #FFBC00 |
FAQs
Single component to generate dynamic star svg
The npm package react-dynamic-star receives a total of 45 weekly downloads. As such, react-dynamic-star popularity was classified as not popular.
We found that react-dynamic-star demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.