Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
react-images
Advanced tools
A mobile-friendly, highly customizable, carousel component for displaying media in ReactJS
Don't use this in a new project. This package hasn't been properly maintained in a long time and there are much better options available.
Instead, try...
A mobile-friendly, highly customizable, carousel component for displaying media in ReactJS.
Should work in every major browser... maybe even IE10 and IE11?
Start by installing react-images
npm install react-images
or
yarn add react-images
If you were using 0.x
versions: library was significantly rewritten for 1.x
version and contains several breaking changes.
The best way to upgrade is to read the docs and follow the examples.
Please note that the default footer parses HTML automatically (such as <b>I'm bold!</b>
) but it does not implement any form of XSS or sanitisation. You should do that yourself before passing it into the caption field of react-images.
Import the carousel from react-images
at the top of a
component and then use it in the render function.
import React from 'react'
import Carousel from 'react-images'
const images = [{ source: 'path/to/image-1.jpg' }, { source: 'path/to/image-2.jpg' }]
class Component extends React.Component {
render() {
return <Carousel views={images} />
}
}
Import the modal and optionally the modal gateway from
react-images
at the top of a component and then use it in
the render function.
The ModalGateway
will insert the modal just before the
end of your <body />
tag.
import React from 'react'
import Carousel, { Modal, ModalGateway } from 'react-images'
const images = [{ source: 'path/to/image-1.jpg' }, { source: 'path/to/image-2.jpg' }]
class Component extends React.Component {
state = { modalIsOpen: false }
toggleModal = () => {
this.setState(state => ({ modalIsOpen: !state.modalIsOpen }))
}
render() {
const { modalIsOpen } = this.state
return (
<ModalGateway>
{modalIsOpen ? (
<Modal onClose={this.toggleModal}>
<Carousel views={images} />
</Modal>
) : null}
</ModalGateway>
)
}
}
The simplest way to define a list of images for the carousel looks like:
const images = [{ source: 'path/to/image-1.jpg' }, { source: 'path/to/image-2.jpg' }]
However, react-images supports several other properties on each image object than just source
. For example:
const image = {
caption: "An image caption as a string, React Node, or a rendered HTML string",
alt: "A plain string to serve as the image's alt tag",
source: {
download: "A URL to serve a perfect quality image download from",
fullscreen: "A URL to load a very high quality image from",
regular: "A URL to load a high quality image from",
thumbnail: "A URL to load a low quality image from"
};
}
All these fields are optional except source
. Additionally, if using an object of URLs (rather than a plain string URL) as your source
, you must specify the regular
quality URL.
FAQs
A mobile-friendly, highly customizable, carousel component for displaying media in ReactJS
The npm package react-images receives a total of 34,054 weekly downloads. As such, react-images popularity was classified as popular.
We found that react-images demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.