
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
svelte-dnd-list
Advanced tools
A very lightweight, dependency free and simple drag and drop library for Svelte. The library supports multiple types of lists, and moving items between lists.
It's still currently in development and as such its API is not stable and might change as development continues.
Install through npm with:
npm i svelte-dnd-list
Below is a very simple example that shows reordering an array of numbers in a vertical list. You can play with this example here.
<svelte:options immutable={true} />
<script lang="ts">
import DragDropList, { VerticalDropZone, reorder, type DropEvent } from 'svelte-dnd-list';
let items = [1, 2, 3, 4, 5];
function onDrop({ detail: { from, to } }: CustomEvent<DropEvent>) {
if (!to || from === to) {
return;
}
items = reorder(items, from.index, to.index);
}
</script>
<h1>Svelte Dnd List - Simple Example</h1>
<DragDropList
id="example"
type={VerticalDropZone}
itemSize={50}
itemCount={items.length}
on:drop={onDrop}
let:index
>
<div>{items[index]}</div>
</DragDropList>
<style>
div {
display: flex;
justify-content: center;
align-items: center;
width: 50px;
height: 50px;
border: 1px solid black;
}
</style>
FAQs
Simple and lightweight Svelte drag and drop library
The npm package svelte-dnd-list receives a total of 4,418 weekly downloads. As such, svelte-dnd-list popularity was classified as popular.
We found that svelte-dnd-list demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.