Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
react-material-timeline
Advanced tools
react-material-timeline
is a vertical (right now!) timeline component which can be summarized with a simple equation:
react-material-timeline = react + material-ui + the code
If you are looking for elegant, simple library to show time based event, this is the perfect candidate!
material-ui
and compatible with material themehttps://react-material-timeline.stackblitz.io
react-material-timeline
uses material-ui
library.
It means you should have configured material-ui
before you start.
For more information look here: https://material-ui.com/getting-started/installation/
yarn add react-material-timeline
or
npm install react-material-timeline
events
Timeline
import { Timeline } from 'react-material-timeline';
import { Avatar, Icon } from '@material-ui/core';
const icon =
const events = [
{
title: 'Event 1',
subheader: new Date().toDateString(),
description: [ 'Some description for event 1' ],
icon: <Avatar><Icon>work</Icon></Avatar>,
},
{
title: 'Event 2',
subheader: new Date().toDateString(),
description: [ 'Some description for event 2' ],
icon: <Avatar><Icon>home</Icon></Avatar>,
}
];
class AwesomeTimeline extends Component {
render() {
return <Timeline events={events}/>;
}
}
It is possible to inject CSS styles for cards via styles
property:
// make text in timeline right cards to be aligned to the right
<Timeline events={events} styles={{ rightCard: { textAlign: 'right' } }} />
Currently, it is possible to adjust left and right cards separatelly.
If you have any ideas how to make this library better or you found a bug feel free to open new issue. This is our hobby project and we'd like to invite you to have fun enhancing it with us!
FAQs
Timeline component basing on material-ui
We found that react-material-timeline demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.