
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@civic/common-gateway-react
Advanced tools
1. Bump common-gateway-react version and add -betaX 1. Publish this version to npm - `yarn publish --tag beta` 1. Set this as the version in the RC 1. PR and have it tested 1. When all good, remove -betaX and release a formal version 1. Set this as the
yarn publish --tag beta
The main orchestration logic for creating a token is in the 'useOrchestration' hook:
onGatewayTokenCreatedOrChanged
that fires dispatches 2 events tokenChange
and civicPass_check_token_status
. tokenChange sets the necessary state variables to handle the end of token creation and civicPass_check_token_status handles displaying the correct iframe screen, depending on parametersfindGatewayToken
. In the case where a created listener does exist, then if a gateway token comes into the state at any time during the 'expect token' interval, the timer is cancelled.The React component needs to take into account 3 external statuses when deciding what the gatewayStatus should be, and what transitions should be allowed. Where the gateway status can be thought of as a combined single value that clients can use to display something to their users
fetchOnChainStatus
gatekeeperRecordState
to REQUESTING, the http status code and payloads determine the value on responsedataCollectionStatus
. The gatewayStatus only takes this status into account if we're still in the data collection phase, i.e. a token request hasn't been made and the gatewayStatus is NOT_REQUESTEDFAQs
1. Bump common-gateway-react version and add -betaX 1. Publish this version to npm - `yarn publish --tag beta` 1. Set this as the version in the RC 1. PR and have it tested 1. When all good, remove -betaX and release a formal version 1. Set this as the
The npm package @civic/common-gateway-react receives a total of 169 weekly downloads. As such, @civic/common-gateway-react popularity was classified as not popular.
We found that @civic/common-gateway-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.