
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
react-easy-css-grid-layout
Advanced tools
Reusable react grid layout component taking props to render a certain CSS Grid container
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Unpopular package
QualityThis package is not very popular.
Found 1 instance in 1 package
Socket optimized override available
A layout component rendering a Grid container with customizable number of columns, their width and gap between columns/rows.
Run npm i react-easy-css-grid-layout
or yarn add react-easy-css-grid-layout
in the root of your React project
In the component import Grid with
import Grid from 'react-easy-css-grid-layout'
Wrap around the children elements to render them in a grid:
<Grid columns={"2"} gap={'1em'}>
<p>1. Will go to the first column</p>
<p>2. Will go to the second column</p>
<p>3. Will go to the first column</p>
<p>4. Will go to the second column and so on...</p>
</Grid>
<Grid columns={"2"} gap={'1em'}>
{renderAll.all(products)}
</Grid>
There are two props accepted: columns
and gap
columns
accepted values:<Grid columns={"2"} gap={'1em'}>
// will create 2 equally sized columns
<Grid columns={"5"} gap={'1em'}>
will create 5 equally sized columns
<Grid columns={"1fr 50% 200px"} gap={'1em'}>
// will create 3 columns with width 1fr for the first columns, 50% for the second column and 200px for the third column
gap
accepted values:Any length unit which will be used as a gap between columns and rows of your grid
Done at Barcelona Code School
FAQs
Reusable react grid layout component taking props to render a certain CSS Grid container
The npm package react-easy-css-grid-layout receives a total of 0 weekly downloads. As such, react-easy-css-grid-layout popularity was classified as not popular.
We found that react-easy-css-grid-layout demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.