
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@jakehedman/reactfire
Advanced tools
Hooks, Context Providers, and Components that make it easy to interact with Firebase.
If you're looking for docs for the deprecated ReactFire v1 (the one that uses mixins), click here
Status: Alpha. ReactFire is meant for React Concurrent Mode, which is only available in experimental React builds.
useFirestoreCollection and useUser, let you easily subscribe to
events, and automatically unsubscribe when your component unmounts.<Suspense> - Reactfire's hooks throw promises
that Suspense can catch. No more isLoaded ?... - let React
handle it for you.<SuspenseWithPerf>
component# npm
npm install reactfire@next
# yarn
yarn add reactfire@next
If you like living life on the edge, use reactfire@canary.
Check out the live version on StackBlitz!
import React, { Component } from 'react';
import { render } from 'react-dom';
import './style.css';
import {
FirebaseAppProvider,
useFirestoreDocData,
SuspenseWithPerf
} from 'reactfire';
import 'firebase/performance';
const firebaseConfig = {
/* add your config object from the Firebase console */
};
function Burrito() {
// lazy load the Firestore SDK and create a ref
const burritoRef = useFirestore()
.collection('tryreactfire')
.doc('burrito');
// subscribe to the doc. just one line!
// throws a Promise for Suspense to catch,
// and then streams live updates
const burrito = useFirestoreDocData(burritoRef);
// get the value from the doc
const isYummy = burrito.yummy;
return <p>The burrito is {isYummy ? 'good' : 'bad'}!</p>;
}
function App() {
return (
<FirebaseAppProvider firebaseConfig={firebaseConfig} initPerformance>
<h1>🌯</h1>
<SuspenseWithPerf
fallback={'loading burrito status...'}
traceId={'load-burrito-status'}
>
<Burrito />
</SuspenseWithPerf>
</FirebaseAppProvider>
);
}
render(<App />, document.getElementById('root'));
yarn install.cd into the reactfire directory. Run yarn and yarn watch.cd into the reactfire/sample directory. run yarn and
yarn start.cd into the reactfire/reactfire directoryyarn testFAQs
Firebase library for React
We found that @jakehedman/reactfire demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.