
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
react-listview-keys
Advanced tools
Create List components with keyboard support
npm i react-listview-keys --save

ListView = require 'react-listview'
ListView
className: 'list-view'
itemClassName: 'list-view__item'
selectedItemClassName: 'list-view__item--selected'
items: @state.listItems
selectedItemId: @state.selectedListItemId
collapsedItemIds: @state.collapsedListItemIds
onCollapseItem: @_handleCollapseListItem
onExpandItem: @_handleExpandListItem
onSelectItem: @_handleSelectListItem
renderItem: (itemId, parentItemIds = []) =>
item = @_getItemById(itemId)
if parentItemIds.length == 0
if item.children?.size > 0
SimpleListItem
item: item
else
FoldableListItem
item: item
else
SimpleListSubItem
item: item
### Props
className - CSS class of the whole ListView component
itemClassName - CSS class of non-selected ListItem
selectedItemClassName - CSS class of selected ListItem
items - immutable.List of items to render
selectedItemId - id of selected items
collapsedItemIds - immutable.List of ids of collapsed parent items
onCollapseItem - callback called when collapsing a parent item
onExpandItem - callback called when expanding a parent item
onSelectItem - callback called after click on an item
renderItem - function that renders the item (passed as callback so apps can handle the rendering of the main content itself)
## Development
git clone git@github.com:avocode/react-listview.git
cd react-listview
npm install
Run tests:
npm test
FAQs
Create List components with keyboard support
We found that react-listview-keys demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.