Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/Spikef/react-native-gesture-password
A gesture password component for React Native. It supports both iOS and Android since it's written in pure JavaScript.
一个React Native的手势密码组件,纯JavaScript实现,因此同时支持iOS和安卓平台。
npm install react-native-gesture-password --save
All properties bellow are optional.
The message text you want to show. NOTE: If you leave this blank, no message appears for any state changes.
Can be 'normal', 'right' or 'wrong'.
The gesture password don't validate your password. You should do that yourself, and tell the result by status.
Styles for the gesture password view.
Style for the text element in the view.
Use this color to render when status !== 'wrong'.
Use this color to render when status === 'wrong'.
The active circles will be reset automatically after you give an interval.
Allow cross the circles(eg: 1 -> 7 -> 4), default is false.
Event raised when user touch a number circle.
Event raised when user finish input a password.
Event raised after the reset interval has cleared circles. Can be used to reset message.
Other components that you want to display.
var React = require('react-native');
var {
AppRegistry,
} = React;
var PasswordGesture = require('react-native-gesture-password');
var Password1 = '';
var AppDemo = React.createClass({
// Example for check password
onEnd: function(password) {
if (password == '123') {
this.setState({
status: 'right',
message: 'Password is right, success.'
});
// your codes to close this view
} else {
this.setState({
status: 'wrong',
message: 'Password is wrong, try again.'
});
}
},
onStart: function() {
this.setState({
status: 'normal',
message: 'Please input your password.'
});
},
onReset: function() {
this.setState({
status: 'normal',
message: 'Please input your password (again).'
});
},
// Example for set password
/*
onEnd: function(password) {
if ( Password1 === '' ) {
// The first password
Password1 = password;
this.setState({
status: 'normal',
message: 'Please input your password secondly.'
});
} else {
// The second password
if ( password === Password1 ) {
this.setState({
status: 'right',
message: 'Your password is set to ' + password
});
Password1 = '';
// your codes to close this view
} else {
this.setState({
status: 'wrong',
message: 'Not the same, try again.'
});
}
}
},
onStart: function() {
if ( Password1 === '') {
this.setState({
message: 'Please input your password.'
});
} else {
this.setState({
message: 'Please input your password secondly.'
});
}
},
*/
getInitialState: function() {
return {
message: 'Please input your password.',
status: 'normal'
}
},
render: function() {
return (
<PasswordGesture
ref='pg'
status={this.state.status}
message={this.state.message}
onStart={() => this.onStart()}
onEnd={(password) => this.onEnd(password)}
/>
);
}
});
AppRegistry.registerComponent('AppDemo', () => AppDemo);
v1.0.5 TextStyle and onReset event. (@caledhwa)
v1.0.4 Manage the adaptation to landscape orientation. (@jujumoz)
v1.0.3 Add the allowCross property.
v1.0.2 Improve the performance for real device.
v1.0.0 Rewrite in pure javascript, for Android support.
This old version(<0.1.0) is at the branch native. I won't update that unless fix bugs.
If you have suggestions or bug reports, feel free to send pull request or create new issue.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.