
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
vaadin-combo-box
Advanced tools
<vaadin-combo-box> is a Polymer element combining a dropdown list with an input field for filtering the list of items, part of the Vaadin Core Elements.
<div>
<style is="custom-style">
paper-icon-item {
margin: -13px -16px;
}
paper-icon-item img {
border-radius: 50%;
}
</style>
<template is="dom-bind">
<iron-ajax url="https://randomuser.me/api?results=100&inc=name,email,picture" last-response="{{response}}" auto></iron-ajax>
<vaadin-combo-box items="[[response.results]]" item-value-path="email" item-label-path="email">
<template>
<paper-icon-item>
<img src="[[item.picture.thumbnail]]" item-icon>
<paper-item-body two-line>
<div>[[item.name.first]] [[item.name.last]]</div>
<div secondary>[[item.email]]</div>
</paper-item-body>
</paper-icon-item>
</template>
</vaadin-combo-box>
</template>
</div>
Fork the vaadin-combo-box repository and clone it locally.
Make sure you have npm installed.
When in the vaadin-combo-box directory, run npm install to install dependencies.
Install polymer-cli: npm install -g polymer-cli
When in the vaadin-combo-box directory, run polymer install --variants to install Bower dependencies
Run polymer serve -o, that will open 3 tabs in your default browser: one pointing the Polymer1 API index of the component,
the second one pointing to the Polymer2 API, and the third one to the main page indicating the variants of the project.
Hence, you can visit demos and tests by changing the URL path in the first two tabs.
vaadin-combo-box directory, run polymer testWe are using ESLint for linting JavaScript code. You can check if your code is following our standards by running gulp lint, which will automatically lint all .js files as well as JavaScript snippets inside .html files.
gulp lintnpm testApache License 2.0
FAQs
Polymer element for displaying a list of items with filtering
We found that vaadin-combo-box demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.