
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@dhaiwat10/react-link-preview
Advanced tools
A React component that renders beautiful, fully-customizable link previews.
Install the package:
yarn add @dhaiwat10/react-link-preview
npm install @dhaiwat10/react-link-preview
Import and render the preview:
import { LinkPreview } from '@dhaiwat10/react-link-preview';
const Home = () => {
return <LinkPreview url='https://www.youtube.com/watch?v=dQw4w9WgXcQ' width='400px' />;
};
If the component renders nothing, it means that no metadata could be scraped for the URL. Provide a fallback
component if you don't want to render null
.
This package uses a Heroku proxy (open-source) to get around CORS issues. The public proxy receives a lot of traffic (+ there is a rate limit) and is not recommended for production use.
customFetcher
prop to pass a fetcher function that fetches data from your proxy. The LinkPreview
will now use your proxy as the data source. More details below.You can pass the following props to the LinkPreview
component.
url
(string)The URL for which you want to generate the link preview.
customFetcher?
(function)A function that takes in a url
& fetches data from a proxy/server. The function should return a Promise that resolves to an object with the following structure:
{
title: string | null;
description: string | null;
image: string | null;
siteName: string | null;
hostname: string | null;
}
You can use any data-source as you like as long as the customFetcher
function returns a Promise that resolves to an object with the above structure.
fallback?
(JSX.Element / any valid JSX)A fallback component which will be rendered if a link preview could not be generated.
fallbackImageSrc
(string)A fallback image src/URL which will be used if there was no image found for the URL.
explicitImageSrc
(string)The src that will be used for the image regardless of what the data source returns.
showLoader?
(boolean)Whether you want to display the default loading skeleton or not.
customLoader?
(JSX.Element / any valid JSX)Custom loader that will be displayed in place of the default loader.
backgroundColor?
(string)Background color of the card.
primaryTextColor?
(string)Color of the primary text (title).
secondaryTextColor?
(string)Color of the secondary text (description, URL, domain name).
borderColor?
(string)Color of the border of the card.
className?
(string)Any custom CSS class that you want to apply to the card.
width?
(string or number)Width of the card.
height?
(string or number)Height of the card.
margin?
(string or number)Margin around the card.
descriptionLength?
(number)Length of the description in the card. (number of characters)
borderRadius?
(string or number)Border radius of the card.
imageHeight?
(string or number)Height of the image.
textAlign?
( left, right or center)Alignment of the text.
openInNewTab?
(boolean)Where the link is opened (new tab or current tab).
Props marked with ? are optional.
FAQs
React library to preview links.
The npm package @dhaiwat10/react-link-preview receives a total of 694 weekly downloads. As such, @dhaiwat10/react-link-preview popularity was classified as not popular.
We found that @dhaiwat10/react-link-preview demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.