
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@payfonte/payfonte-react
Advanced tools
This is an reactJS library for implementing payfonte payment checkout
A React library that provides a reusable react hook for integrating with the Payfusion checkout system.
This hook allows you to easily accept payment by invoking its handlePayfontePayment method returned from the usePayfonte hook provides the accurate args are passed to the method.
You can install @payfonte/payfonte-react using npm:
npm install @payfonte/payfonte-react
usePayfonte hook:import React from 'react';
import { usePayfonte, PayfontePaymentProps } from '@payfonte/payfonte-react'
onSuccess, and onClose callback functions to be passed when hooks is initialised:function onSuccess(data: any) {
console.log(data);
}
function onClose() {
console.log("payfonte modal closed");
}
const { handlePayfontePayment, isPaymentLoading } = usePayfonte({
isProduction: false, // can be true of false
onClose,
onSuccess
clientId: 'payfusion', // required, Your client-id
})
const config: PayfontePaymentProps = {
amount: 1000, // amount * 100 - amount in lowest currency denomination e.g kobo for naira, cents for dollars - 1000/100 = 10
currency: 'NGN', //NGN, XOF, XAF, USD e.t.c depends on the currency the client provided
reference: `${Date.now()}`, //if you have your own transactionId you want to track this payment with
user: {
email: 'email@example.com',
name: 'John Doe',
phoneNumber: '+XXX XXXX XXXXX'
},// required - user object
metadata: {} // optional - your data that will come back with the event
}
return (
<>
<p>
{isPaymentLoading ? 'Payment initiated' : 'Payment not initiated'}
</p>
<button onClick={() => handlePayfontePayment(config)}>Pay 10 NGN</button>
</>
)
FAQs
This is an reactJS library for implementing payfonte payment checkout
We found that @payfonte/payfonte-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.