
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
A tiny, theme‑aware Streamlit component that adds a one‑click "copy-to-clipboard" button to your app — perfect for the chat UI, URLs or any other text the user might need to copy.
pip install st-copy
import streamlit as st
from st_copy import copy_button
st.title('Minimal demo')
copy_button('Hello, Streamlit!') # one line – that's it 🎉
Run your script:
streamlit run app.py
def copy_button(
text: str,
*,
icon: Literal['material_symbols', 'st'] = 'material_symbols',
tooltip: str = 'Copy',
copied_label: str = 'Copied!',
key: Optional[str] = None,
) -> Optional[bool]:
Parameter | Type / Default | Description |
---|---|---|
text | str | Text placed on the user’s clipboard. |
icon | Literal['material_symbols', 'st'] default 'material_symbols' | Icon style: Google Material content_copy (material_symbols ) or Streamlit’s native code‑block icon (st ). |
tooltip | str, default 'Copy' | Tooltip shown on hover/focus. |
copied_label | str, default 'Copied!' | Small label displayed for ~1 s after a successful copy. |
key | str | None, default None | Unique component key; if omitted a random UUIDv4 is generated. |
Returns | bool | None | True – copy succeeded; False – Clipboard API failed; None – button not clicked yet. |
See examples/app.py for a chat‑style demo that showcases every argument and the deployed version at https://st-copy.streamlit.app/.
FAQs
Streamlit copy‑to‑clipboard button component
We found that st-copy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.