
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@tripleplaypay/react-native
Advanced tools
Install the SDK
npm install @tripleplaypay/react-native
For assistance setting up the hardware, visit this document.
To get started with the TPP React Native SDK on iOS, follow these steps:
npx pod-install
ios/ in XCode. You can do so from the commandline like this:open ./ios/MyProject.xcworkspace
Info.plist file:Info.plist must contain an NSBluetoothAlwaysUsageDescription key with a string value explaining to the user how the app uses this data.+ button under any of the entries and select Privacy - Bluetooth Always Usage Description and make sure to place an accurate description in the text box next to it.General tab, Click on the + symbolWorkspace > Pods > MagTekSDK.xcframeworknpx react-native start
If our Android MagTek SDK doesn't resolve, you may need to add our repo to the allprojects section of your android app's gradle file, like so:
allprojects {
repositories {
google()
mavenCentral()
maven {
url = uri('https://maven.pkg.github.com/TriplePlayPay/TPP-Android-MagTekSDK')
credentials {
username "${GITHUB_USER}"
password "${GITHUB_TOKEN}"
}
}
}
}
@tripleplaypay/react-native module in your project:import {TPPSDKModule} from '@tripleplaypay/react-native';
TPPSDKModule.initialize('prod-key-example');
or for testing sandbox transactions
TPPSDKModule.initializeSandbox('sandbox-key-example');
To initiate a transaction, use the useTransactionUpdates hook to get the startTransaction method and a stateful transactionResult object that updates during each phase of the transaction processing.
Use the hook inside of a react component so that transactionResult changes will trigger re-render effects:
const {transactionResult, startTransaction} = TPPSDKModule.useTransactionUpdates();
// Start the transaction
startTransaction('10.00');
The message property on transactionResult will begin statefully updating with messages such as:
"PRESENT CARD" when it is ready for the user to pay, "APPROVED" if the transaction submitted to TPP servers successfully, or "DECLINED" for other failures.
FAQs
Stripe SDK for React Native
We found that @tripleplaypay/react-native demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.