
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
react_date_picker
Advanced tools
📅 React时间选择组件
npm install react_date_picker --save
// ...
// ES6
import React, { Component } from "react";
import ReactDOM from "react-dom";
import ReactDatePicker from "react_date_picker";
class App extends Component {
constructor(props) {
super(props);
}
handleDateChange(date) {
// ...
}
handleClose(date) {
// ...
}
render() {
const config = {
initDate: "2016-09-12",
format: "YYYY-mm-dd",
onClose: this.handleClose.bind(this),
onChange: this.handleDateChange.bind(this)
};
return (<div class="app">
<ReactDatePicker config={config} />
</div>);
}
}
属性名 | 意义 | 类型 | 默认 | 是否必须 |
---|---|---|---|---|
el | 选择器(input框的class/id之类的) | String | N/A | 是 |
trigger | 在什么事件下显示选择器 | Array.<String> | N/A | 是 |
initDate | 默认时间 | Date/String | N/A | 是 |
format | 输出时间的格式 | String | N/A | 是 |
onOpen | 时间选择器刚显示的回调 | Fnnction | N/A | 否 |
onClose | 时间选择器关闭后的回调 | Fnnction | N/A | 否 |
onChange | 选择时间发生变化的回调 | Fnnction | N/A | 否 |
FAQs
📅 React时间选择组件
The npm package react_date_picker receives a total of 0 weekly downloads. As such, react_date_picker popularity was classified as not popular.
We found that react_date_picker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.