
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@pageproof/react-tunnels
Advanced tools
**React Tunnels is experimental, please proceed with caution. The v0.x release is not appropriate for production use-cases. The API is subject to change - so if you do decide to use it, please make sure to use `--save-exact` when installing to avoid unexp
React Tunnels is experimental, please proceed with caution. The v0.x release is not appropriate for production
use-cases. The API is subject to change - so if you do decide to use it, please make sure to use --save-exact
when
installing to avoid unexpected surprises.
React Tunnels are a convenient way of specifying a different part of the component tree to render your components. Think React Portals but without the DOM. It's worth noting that it's not exactly like React Portals, but it can have a similar effect.
React Tunnels can also be used to pass around data, called "flags". Flags can be used to customize how the tunnel is rendered, or just a convenient way to pass around data & keep it in-sync without emitting events.
$ npm install --save @pageproof/react-tunnels
Documentation is minimal right now, as we decide the best API for React Tunnels. We have some incomplete documentation
in the docs folder in the repo. Probably the best place to start would be the createTunnel()
documentation, as it contains some examples. And using/enabling TypeScript intellisense features in your IDE will also
help a lot.
FAQs
**React Tunnels is experimental, please proceed with caution. The v0.x release is not appropriate for production use-cases. The API is subject to change - so if you do decide to use it, please make sure to use `--save-exact` when installing to avoid unexp
We found that @pageproof/react-tunnels demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.