
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Tourist Guide into your React Components (demo)
npm i -S reactour
Add the Tour
Component in your Application:
import Tour from 'reactour'
class App extends Component {
// ...
render (
<div>
{ /* other stuff */}
<Tour
steps={steps}
isOpen={this.state.isTourOpen}
onRequestClose={this.closeTour} />
</div>
)
}
const steps = [
{
selector: '.first-step',
content: 'This is my first Step',
},
// ...
]
Prop | Desc | Type | Default | Is Required |
---|---|---|---|---|
badgeContent | Function to customize Badge content (current, total) => {} | func | ||
className | Custom class to add to the helper | string | ||
closeWithMask | Close clicking the mask | bool | true | |
disableInteraction | Isn't possible to interact with highlighted elements | bool | ||
highlightedMaskClassName | Custom class name for element which is overlaid target element | string | ||
inViewThreshold | Scroll element to show when is outiside viewport adding this threshold value | number | ||
isOpen | you know… | bool | ✅ | |
lastStepNextButton | Change Next button in last step into a custom button to close the Tour | string | ||
maskClassName | Custom class to add to the mask | string | ||
maskSpace | padding between elemente showed and mask | number | 10 | |
nextButton | next navigation button text | string | ||
onAfterOpen | function triggered after open | func | () => { document.body.style.overflowY = 'hidden' } | |
onBeforeClose | function triggered before close | func | () => { document.body.style.overflowY = 'auto' } | |
onRequestClose | function triggered to close | func | ||
prevButton | prev navigation button text | string | ||
scrollDuration | Smooth scroll duration when positioning the target element | number | 1 | |
scrollOffset | Offset when positioning the target element | number | calculates the vertical center of the page | |
showButtons | Show helper navigation butons | bool | true | |
showNavigation | Show helper navigation dots | bool | true | |
showNavigationNumber | Show number when hovers on each navigation dots | bool | true | |
showNumber | Show helper number badge | bool | true | |
startAt | Starting step each time the Tour is open | number | ||
steps | Array of steps with info and props | [view bellow] | ✅ | |
update | Value to listen if a forced update is needed | string | ||
updateDelay | Delay time when forcing update. Useful when there are known animation/transitions | number | 1 |
steps: PropTypes.arrayOf(PropTypes.shape({
'selector': PropTypes.string.isRequired,
'content': PropTypes.oneOfType([
PropTypes.node,
PropTypes.element,
PropTypes.func,
]).isRequired,
'position': PropTypes.string,
'action': PropTypes.func,
'style': PropTypes.object,
})),
const steps = [
{
selector: '[data-tour="my-first-step"]',
content: ({ goTo, inDOM }) => (
<div>
Lorem ipsum <button onClick={() => goTo(4)}>Got to Step 5</button>
<br />{ inDOM && '🎉 Look at your step!'}
</div>
),
position: 'top',
action: node => {
node.focus()
console.log('yup, the target element is also focused!')
},
style: {
backgroundColor: '#bada55',
},
},
// ...
]
FAQs
Tourist Guide into your React Components
The npm package reactour receives a total of 20,657 weekly downloads. As such, reactour popularity was classified as popular.
We found that reactour demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.