
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@chainplatform/pin
Advanced tools
A lightweight second-layer security module for React Native / React Native Web. Provides a PIN lock overlay that can be triggered globally, with support for setting/resetting PIN.
A lightweight second-layer security module for React Native / React Native Web.
Provides a PIN lock overlay that can be triggered globally, with support for setting/resetting PIN.
autoLockMinutes) – optionallockOnResume) – optionalrequirePinOnStart) – optionalshowPinLock, hidePinLock, setPinLocknpm install @chainplatform/pin
# or
yarn add @chainplatform/pin
PinLockProviderimport React from "react";
import { PinLockProvider } from "@chainplatform/pin";
import AppNavigator from "./AppNavigator";
export default function App() {
return (
<PinLockProvider
autoLockMinutes={5} // ⏳ optional: auto lock after 5 minutes inactivity
lockOnResume={true} // 🔄 optional: lock when app comes back from background
requirePinOnStart={true} // 🚪 optional: lock immediately when app starts
correctPin="123456" // 🔑 initial correct PIN, required
onSetPin={(pin) => console.log("New PIN set:", pin)} // Callback when PIN is set
// Optional text customization
headerText="Enter your PIN"
setupText="Set a new PIN"
confirmText="Confirm your PIN"
resetText="Reset PIN"
cancelText="Cancel"
>
<AppNavigator />
</PinLockProvider>
);
}
import React, { Component } from "react";
import { View, Text, Button } from "react-native";
import { showPinLock, hidePinLock, setPinLock } from "@chainplatform/pin";
export default class ProfileScreen extends Component {
render() {
return (
<View style={{ flex: 1, justifyContent: "center", alignItems: "center" }}>
<Text>👤 Profile Screen</Text>
<Button
title="Lock this screen"
onPress={() =>
showPinLock({
correctPin: "999999",
onUnlock: () => alert("Profile Unlocked!"),
})
}
/>
<Button title="Reset PIN" onPress={() => setPinLock()} />
</View>
);
}
}
PinLockProvider Props| Prop | Type | Default | Description |
|---|---|---|---|
autoLockMinutes | number | null | ⏳ Optional. Auto lock after X minutes of inactivity. |
lockOnResume | boolean | false | 🔄 Optional. Lock when app comes back from background. |
requirePinOnStart | boolean | false | 🚪 Optional. Require PIN immediately when app first opens. |
correctPin | string | null | 🔑 Initial PIN to unlock. Required for first setup. |
onSetPin | function | null | Callback when a new PIN is successfully set. |
showPinLock(options) – Show the PIN overlayhidePinLock() – Hide the PIN overlaysetPinLock() – Start the PIN setup/reset flowshowPinLock(options)| Option | Type | Default | Description |
|---|---|---|---|
correctPin | string | "123456" | The correct PIN to unlock. |
onUnlock | function | null | Callback when PIN is correct. |
correctPin is not set, the overlay enters setup mode automaticallyonSetPin callbackPinLockProvider with optional propsshowPinLock, hidePinLock, setPinLock anywhereFAQs
A lightweight second-layer security module for React Native / React Native Web. Provides a PIN lock overlay that can be triggered globally, with support for setting/resetting PIN.
The npm package @chainplatform/pin receives a total of 6 weekly downloads. As such, @chainplatform/pin popularity was classified as not popular.
We found that @chainplatform/pin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.