Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@rio-cloud/rio-session-expired-info
Advanced tools
👉 Provides the SessionExpiredDialog
component that can be used to inform the user about their expired session.
🔋 Comes "batteries included", meaning you don't need to provide the translations. Just supply it with the current locale of your app.
Before installing, make sure you have these dependencies in your project already as they're needed by this package:
react
version 16.7 or abovereact-dom
version 16.7 or abovereact-intl
version 5.24.8 or above@rio-cloud/rio-uikit
version 0.15 or aboveNext, add the npm package to your project:
npm install @rio-cloud/rio-session-expired-info --save
import { SessionExpiredDialog } from '@rio-cloud/rio-session-expired-info';
const Example = () => {
const [showDialog, setShowDialog] = useState(false);
const handleDialogClose = () => {
setShowDialog(false);
// you could perform other things, e.g. track that the user deliberately wants to stay in the current page
};
return (
<SessionExpiredDialog
show={showDialog}
onClose={handleDialogClose}
locale="en-GB"
/>
);
}
Both @rio-cloud/rio-uikit
and @rio-cloud/rio-session-expired-info
are licensed under the Apache 2.0 license.
You can see the full license text in LICENSE.
A local demo page can be started with npm start
. You can view it at http://localhost:3000.
ℹ️ The version
in the package.json is always the latest one that's already on npmjs.com.
💪 Publishing is done by hand from your local dev machine, but mostly automated to guarantee a consistent way.
⚠️ Make sure you've committed & pushed all your changes and your working copy is clean & up to date with the remote. Then, when you're ready:
npm run release
Before running the actual release
script, npm will call our prerelease
script automatically, which will
dist
folder that's going to be a part of the package)Once that's done, the release
script will kick in, which will start np. That will
master
branch, no changed files, etc.)npm install
just to be surepackage.json
and lockfile with the new version + commit & tagnpm publish
internally (this might ask you for your npmjs.com login incl. 2FA)FAQs
The RIO Session Expired Dialog
We found that @rio-cloud/rio-session-expired-info demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.