Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@eriktrom/react-native-signature-capture
Advanced tools
React Native library for capturing signature
User would sign on the app and when you press the save button it returns the base64 encoded png
First you need to install react-native-signature-capture:
npm install react-native-signature-capture --save
Second you need to link react-native-signature-capture:
react-native link react-native-signature-capture
Use above react-native link
command to automatically complete the installation, or link manually like so:
Add these lines in your file: android/settings.gradle
...
include ':reactnativesignaturecapture',':app'
project(':reactnativesignaturecapture').projectDir = new File(settingsDir, '../node_modules/react-native-signature-capture/android')
Add line in your file: android/app/build.gradle
...
dependencies {
...
compile project(':reactnativesignaturecapture') // <-- add this line
}
Add import and line in your file: android/app/src/main/java/<...>/MainApplication.java
...
import com.rssignaturecapture.RSSignatureCapturePackage; // <-- add this import
public class MainApplication extends Application implements ReactApplication {
private final ReactNativeHost mReactNativeHost = new ReactNativeHost(this) {
@Override
protected List<ReactPackage> getPackages() {
return Arrays.<ReactPackage>asList(
new MainReactPackage(),
new RSSignatureCapturePackage() // <-- add this line
);
}
}
...
}
Then you can use SignatureCapture component in your react-native's App, like this:
...
import React, {Component} from 'react';
import SignatureCapture from 'react-native-signature-capture';
class CustomComponent extends Component {
...
render() {
return (
<SignatureCapture
{...someProps}
/>
);
}
}
saveImageFileInExtStorage : Make this props true, if you want to save the image file in external storage. Default is false. Warning: Image file will be visible in gallery or any other image browsing app
showBorder : If this props is made to false, it will hide the dashed border (the border is shown on iOS only).
showNativeButtons : If this props is made to true, it will display the native buttons "Save" and "Reset".
showTitleLabel : If this props is made to true, it will display the "x_ _ _ _ _ _ _ _ _ _ _" placeholder indicating where to sign.
viewMode : "portrait" or "landscape" change the screen orientation based on boolean value
maxSize : sets the max size of the image maintains aspect ratio, default is 500
saveImage() : when called it will save the image and returns the base 64 encoded string on onSaveEvent() callback
resetImage() : when called it will clear the image on the canvas
onSaveEvent : Triggered when saveImage() is called, which return Base64 Encoded String and image file path.
onDragEvent : Triggered when user marks his signature on the canvas. This will not be called when the user does not perform any action on canvas.
/**
* Sample React Native App
* https://github.com/facebook/react-native
*/
var React = require('react');
var ReactNative = require('react-native');
var {Component} = React;
var {
AppRegistry,
StyleSheet,
Text,
View, TouchableHighlight
} = ReactNative;
import SignatureCapture from 'react-native-signature-capture';
class RNSignatureExample extends Component {
render() {
return (
<View style={{ flex: 1, flexDirection: "column" }}>
<Text style={{alignItems:"center",justifyContent:"center"}}>Signature Capture Extended </Text>
<SignatureCapture
style={[{flex:1},styles.signature]}
ref="sign"
onSaveEvent={this._onSaveEvent}
onDragEvent={this._onDragEvent}
saveImageFileInExtStorage={false}
showNativeButtons={false}
showTitleLabel={false}
viewMode={"portrait"}/>
<View style={{ flex: 1, flexDirection: "row" }}>
<TouchableHighlight style={styles.buttonStyle}
onPress={() => { this.saveSign() } } >
<Text>Save</Text>
</TouchableHighlight>
<TouchableHighlight style={styles.buttonStyle}
onPress={() => { this.resetSign() } } >
<Text>Reset</Text>
</TouchableHighlight>
</View>
</View>
);
}
saveSign() {
this.refs["sign"].saveImage();
}
resetSign() {
this.refs["sign"].resetImage();
}
_onSaveEvent(result) {
//result.encoded - for the base64 encoded png
//result.pathName - for the file path name
console.log(result);
}
_onDragEvent() {
// This callback will be called when the user enters signature
console.log("dragged");
}
}
const styles = StyleSheet.create({
signature: {
flex: 1,
borderColor: '#000033',
borderWidth: 1,
},
buttonStyle: {
flex: 1, justifyContent: "center", alignItems: "center", height: 50,
backgroundColor: "#eeeeee",
margin: 10
}
});
AppRegistry.registerComponent('RNSignatureExample', () => RNSignatureExample);
Please checkout the example folder (iOS/Android): https://github.com/eriktrom/react-native-signature-capture/tree/master/Example
Library used:
FAQs
Lets users sign their signatures
The npm package @eriktrom/react-native-signature-capture receives a total of 0 weekly downloads. As such, @eriktrom/react-native-signature-capture popularity was classified as not popular.
We found that @eriktrom/react-native-signature-capture demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.