
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
@influitive/profile-card
Advanced tools
A pop over card component that displays user information and provides some relevant links.
###Installation
Add "@influitive/profile-card": "X.X.XX"
to the projects package JSON ( replaces X.X.XX with the version you want to use)
Run npm install
###Usage In your component:
import ProfileCard from '@influitive/profile-card/lib';
<ProfileCard
id={contactUUID}
disableViewProfile={aBooleanProp}
anonymous={aBooleanProp}
disableMessage={aBooleanProp}
children={wrappedElement} />
###Props
id
(Uuid) of the user whose information is to be display in the card.disableViewProfile
(bool) When true hides the link to the user public profile.disableMessage
(bool) When true hides the link to message that contact.anonymous
(bool) when true renders the generic anonymous advocate information.children
(node) Corresponds to the element to be wrapped. The profile card will toggle when clicking on this element.Extra Considerations:
You will need to style the element that is being wrapped, as the profile-card
does not make assumptions about its children. E.g for avatar images we are normally using:
.profile {
width: 32px;
border-radius: 100%;
}
###How it works
profile-card
is just a regular component built using react-redux. When the children element is clicked an ajax call is fired to the hub's /api/people/${id}.json
to retrieve that especific user information.
FAQs
Provides a single profile card.
We found that @influitive/profile-card demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.