Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@forbole/mrm-preset-forbole-rn
Advanced tools
MRM preset for scaffolding react-native projects [@Forbole](https://github.com/forbole).
MRM preset for scaffolding react-native projects @Forbole.
npx react-native init {{APP_NAME_GOES_HERE}} --template react-native-template-typescript
npx mrm@2 lint-staged
npx -p @storybook/cli sb init --type react_native
yarn add -D mrm
yarn add -D @forbole/mrm-preset-forbole-rn
yarn mrm default --preset @forbole/mrm-preset-forbole-rn
yarn remove mrm @forbole/mrm-preset-forbole-rn
The following tasks are not 100% automatic.
An index.storybook.js
file will be copied to the root directory, along with the necessary use:main
and use:storybook
scripts to switch between app modes.
The existing index.js
file in the project root should be copied into index.main.js
to finalize installation.
index.js
, index.main.js
and index.storybook.js
should be modified by adding the following import to initialize i18n.
import './src/assets/locales/i18n'
This preset contains the following tasks:
This task installs a custom eslint preset built off of airbnb
and react-native-community
presets, as well as configuring eslint with typescript compatibility.
This task installs @testing-library/react-native
and its additional jest matchers, and configures the transformIgnorePatterns
jest property with better compatibility with react-native, and react-navigation.
This task installs several packages that are commonly used in our applications, and configures the project for their use. The current list is as follows:
@react-navigation/native
,react-native-screens
(@react-navigation dependency)react-native-safe-area-context
(@react-navigation dependency)@react-navigation/stack
react-native-gesture-handler
(@react-navigation/stack dependency)@react-native-masked-view/masked-view
(@react-native/stack dependency)formik
- form validationyup
- form validation schemasgraphql
@apollo/client
This task modifies the default husky installation so that eslint errors are flagged during the pre-commit stage and will prevent the commit from succeeding until the issues are manually fixed. (The default behavior is that eslint errors will be automatically fixed on commit, however this may be unwanted in some cases.)
This task modifies the default storybook installation and adds a SbContainer
decorator component for use when creating stories.
Installation is not 100% automatic (see Addition Setup).
This task installs and configures i18next
for react-native projects, and adds a dummy en locale to act as an example.
Installation is not 100% automatic (see Addition Setup).
FAQs
MRM preset for scaffolding react-native projects [@Forbole](https://github.com/forbole).
The npm package @forbole/mrm-preset-forbole-rn receives a total of 1 weekly downloads. As such, @forbole/mrm-preset-forbole-rn popularity was classified as not popular.
We found that @forbole/mrm-preset-forbole-rn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.