Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@telefonica/google-analytics
Advanced tools
@telefonica/google-analytics
Google Analytics 4 library for Telefonica web projects
import {initAnalytics, logEvent, setScreenName} from '@telefonica/google-analytics';
initAnalytics('G-XXXXXXXXXX');
setScreenName('my_screen_name');
logEvent({name: 'my_event_name', foo: 'bar'});
initAnalytics
must be called before any other function. This function will inject the gtag script in the
document.
initAnalytics
function is idempotent. Subsequent calls to initAnalytics
will not have any effect.
logEvent
and setScreenName
calls won't send any data to Google Analytics until initAnalytics
is
called. If you call logEvent
or setScreenName
before initAnalytics
, the calls will be queued and sent
to Google Analytics once initAnalytics
is done.
Events are normalized before being sent to Google Analytics:
If setScreenName
is called multiple times with the same screen name, only the first call will be sent to
Google Analytics.
setScreenName
and logEvent
return a promise that resolves when the event has been sent to Google
Analytics.
All the events are automatically filled with a screenName
param containing the last screen name set with
setScreenName
.
Events are sent to Google servers by default (using gtagApi
), but you can use a custom api to change this
behavior. For example, Novum app uses the webview bridge to send the events to the native app, and then the
native app sends the events to Firebase.
Another use case of custom api is to log events in the browser console in development mode:
import {initAnalytics, consoleApi, gtagApi} from '@telefonica/google-analytics';
initAnalytics('G-XXXXXXXXXX', {
api: process.env.NODE_ENV === 'production' ? gtagApi : consoleApi,
});
If you are using a CSP, you must add the following directives for Google Analytics to work:
script-src https://*.googletagmanager.com; connect-src https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; img-src https://*.google-analytics.com https://*.googletagmanager.com;
Check Google docs for CSP in Google Analytics 4
FAQs
> Google Analytics 4 library for Telefonica web projects
We found that @telefonica/google-analytics demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.