
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
tiny-scroll-listener
Advanced tools
一个监听滚动的小工具
npm install tiny-scroll-listener
import TinyScrollListener from 'tiny-scroll-listener'
const delay = (time) => new Promise((resolve) => setTimeout(resolve, time))
const scrollListener = new TinyScrollListener({
// 滚动容器,需设置 overflow: scroll/auto;
element: document.getElementById('scrollContainer'),
// 触底函数相关
distanceToReachEnd: 100, // 触底函数触发距离,默认为 100px
async onEndReached(done) {
console.log('到达了底部,锁定,两秒后释放')
/**
* 每次触发 onEndReached 函数后会自动阻止下一次触发,需要执行 done 函数来释放阻止
* (例如滚动到底部后开始做网络请求时,再次滚动到底部不会触发二次请求)
* 如果 isOver 为 true 则不会再触发后续的 onEndReached
* (例如已经加载了全部页,不需要再监听触底事件)
*/
await delay(2000)
const isOver = false
done(isOver)
console.log('释放阻止')
},
/**
* 任意滚动位置函数相关,常见场景为滚动到某距离时出现“回到顶部”按钮
* onGoingIn、onGoingOut 只在值变迁瞬间执行一次,不会执行多次
* 可设置多组监听
*/
distanceEvents: [
{
distance: 300,
onGoingIn() {
console.log('滚动距离低于了 300px')
},
onGoingOut() {
console.log('滚动距离高于了 300px')
},
},
],
/**
* 滚动的监听方向,vertical 为纵向,horizontal 为横向
*/
direstion: 'vertical',
})
// 手动解除监听
scrollListener.destroy()
FAQs
We found that tiny-scroll-listener demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.