
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
React component for progressive and responsive image loading.
react-pic works universally. On the server-side, it works by setting a default image (usually something very small to reduce data). On the client-side, it will try to load the optimal image based on prop data.
npm install react-pic --save
<script src='https://unpkg.com/react-pic@latest/dist/react-pic.umd.js'></script>
<!-- or use minified -->
<script src='https://unpkg.com/react-pic@latest/dist/react-pic.umd.min.js'></script>
![]()
import React, { Component } from 'react';
import Pic from 'react-pic';
const images = [
{
width: 40,
url: 'http://placehold.it/40?text=♥'
},
{
width: 250,
url: 'http://placehold.it/250?text=♥'
}
];
export default class Example extends Component {
render() {
return <Pic images={images} />;
}
}
| name | default | required | type | description |
|---|---|---|---|---|
| images | true | array | The collection of images you would like to use as a source. | |
| alt | false | string | Text equivalent of the image. https://www.w3.org/QA/Tips/altAttribute | |
| defaultIndex | 0 | false | number | The image object to use on initial render. |
| noscriptIndex | images.length-1 | false | number | The image object to use on noscript render. |
| baseStyle | { position: 'relative', margin: '-5px', overflow: 'hidden' } | false | object | Override the container style object. |
| imgStyle | { margin: '0 auto', maxWidth: '100%', width: '100%' } | false | object | Override the image style object. |
| shouldBlur | false | false | boolean | Determines if the image should be blurred before setting the optimal image. |
| blurAmount | '20px' | false | string | The amount of blur. Expected format: '10px' or '15%'. |
| renderOutOfView | false | false | boolean | Determines if the optimal image should be selected even if not in view |
FAQs
React component for progressive and responsive image loading.
We found that react-pic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.