
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A lightweight zero dependency React.js library to handle the client's pointer. Easily detect client cursor type and hide/show html or perform custom logic!
npm i tappify
import Tappify from "tappify";
function myComponent() {
return <>
<Tappify.Finger>
Client is using finger 👉 *tap tap*
</Tappify.Finger>
<Tappify.Cursor>
Client is using mouse cursor 🖱️ *click click*
</Tappify.Cursor>
</>
}
const isCursor = Tappify.isCursor(); // will be true if the pointer is mouse cursor. False if it's finger
const unsubscribe = Tappify.subscribe(isCursor => {
if (isCursor) console.log("This client is now using a cursor");
else console.log("This client is now using a touch screen");
});
unsubscribe(); // it's strongly recommended to unsubscribe when component unmounts to avoid memory leaks
With growing usage of touch screens on computer devices Tappify makes it seamless and easy to detect when user goes in or out of touch mode. In addition tappify provides an easy to use switch case scenario to handle different HTML elements depending on what pointer the client is using.
Tappify is completely event driven, that means no clocks/setintervals/requestAnimationFrame making it very preferment. It makes use of css's native @media condition to avoid any edge case bugs that JavaScript solutions might invoke.
Tappify uses @media pointer rule to determine the pointer type. If a pointer change is detected the pointerChange event will be dispatched on window and thereafter notifying subscribers and updating the <Tappify.Cursor>
and <Tappify.Finger>
components.
Please open a new issue on the Github repository
Simply create a new pull request on the pull requests tab.
Tappify will work on all modern browsers. Tappify will not work on IE.
FAQs
A React.js library to detect touch/mobile/cursor
The npm package tappify receives a total of 57 weekly downloads. As such, tappify popularity was classified as not popular.
We found that tappify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.