
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
slotpicker
Advanced tools
**please note that this package is using [dayjs](https://github.com/iamkun/dayjs), its more lightweight then moment and have the same exact syntax**
please note that this package is using dayjs, its more lightweight then moment and have the same exact syntax
npm install slotpicker
Note: the from
, to
, defaultSelectedTime
and unAvailableSlots
parameters follows the 24-hour clock, and if your time picker has 00:00, you should put it in the from param.
import SlotPicker from 'slotpicker';
<SlotPicker
// Required, interval between two slots in minutes, 30 = 30 min
interval={30}
// Required, when user selects a time slot, you will get the 'from' selected value
onSelectTime={(from) => console.log(from)}
// Optional, array of unavailable time slots
unAvailableSlots={['10:00', '15:30']}
// Optional, 8AM the start of the slots
from={'08:00'}
// Optional, 09:00PM the end of the slots
to={'21:00'}
// Optional, 01:00 PM, will be selected by default
defaultSelectedTime={'13:00'}
// Optional, selected slot color
selectedSlotColor='#F09999'
// Optional, language of the displayed text, default is english (en)
lang='ar'
/>;
the selectedSlot you will get in the onSelectTime prop, is the 'from' slot, if you want to display like the 'from' and 'to' selected slots its simple, the from = selectedSlot and to = selectedSlot + interval, use dayjs to manage it
interface SlotPickerProps {
interval: number
onSelectTime: (from: DayJs) => any
unAvailableSlots?: Array<string>
from?: string
to?: string
selectedSlotColor?: string
lang?: 'ar' | 'en'
defaultSelectedTime?: string
}
FAQs
**please note that this package is using [dayjs](https://github.com/iamkun/dayjs), its more lightweight then moment and have the same exact syntax**
The npm package slotpicker receives a total of 46 weekly downloads. As such, slotpicker popularity was classified as not popular.
We found that slotpicker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.