
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@notiflyio/react-native
Advanced tools
Notifly's React Native SDK for building custom inbox notification experiences
Notifly provides @notiflyio/react-native, a React library that helps to add a fully functioning Inbox to your mobile application in minutes. Let's do a quick recap on how you can easily use it in your application.
Full documentation: https://notifly.io.
Note: the SDK's exported provider is named
NovuProvider— Notifly is a fork of Novu and keeps upstream code identifiers for easy upgrades.
@notiflyio/react-native npm package in your react appnpm install @notiflyio/react-native
import { NovuProvider, useNotifications } from '@notiflyio/react-native';
function YourCustomInbox() {
const { notifications, isLoading, fetchMore, hasMore } = useNotifications();
return (
<Show when={!isLoading} fallback={<NotificationListSkeleton />}>
<Show when={notifications && notifications.length > 0} fallback={<EmptyNotificationList />}>
<InfiniteScroll
dataLength={notifications?.length ?? 0}
fetchMore={fetchMore}
hasMore={hasMore}
loader={<LoadMoreSkeleton />}
>
{notifications?.map((notification) => {
return <NotificationItem key={notification.id} notification={notification} />;
})}
</InfiniteScroll>
</Show>
</Show>
);
}
FAQs
Notifly's React Native SDK for building custom inbox notification experiences
The npm package @notiflyio/react-native receives a total of 6 weekly downloads. As such, @notiflyio/react-native popularity was classified as not popular.
We found that @notiflyio/react-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.