Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@xmtp/experimental-content-type-screen-effect
Advanced tools
An experimental content type to support screen effects accompanying messages
This experimental package provides a content type to support adding screen effects to messages.
A screen effect is something that happens on a particular trigger, such as sending balloons along with a happy birthday message or sending snowflakes to accompany a holiday message.
Providing screen effects can be a way to surprise and delight an app's users, by presenting them with an unexpected visual effect.
# npm
npm i @xmtp/experimental-content-type-screen-effect
# yarn
yarn add @xmtp/experimental-content-type-screen-effect
# pnpm
pnpm i @xmtp/experimental-content-type-screen-effect
Screen effects are represented as objects with the following keys:
messageId
: The message id for the message that the screen effect is being sent witheffectType
: The type of effect (currently SNOW
or RAIN
, feel free to add additional effects via a PR)const screenEffect: ScreenEffect = {
reference: someMessageID,
effectType: "SNOW",
};
Now that you have a screen effect, you can send it:
await conversation.messages.send(screenEffect, {
contentType: ContentTypeScreenEffect,
});
Note
contentFallback
text is provided by the codec and is set to undefined, ensuring that clients that don't support this content type are not required to render anything in their app.
Now that you can send a screen effect, you need a way to receive it. For example:
// Assume `loadLastMessage` is a thing you have
const message: DecodedMessage = await loadLastMessage();
if (message.contentType.sameAs(ContentTypeScreenEffect)) {
// We've got a screen effect.
const screenEffect: ScreenEffect = message.content;
}
Generally, screen effects sent with snow or rain are displayed as a visual effect. For example, a snow effect might be displayed as snow falling down the page for a short period of time.
It is important to note that these are not intended to be displayed every time a message is loaded; for that reason, apps using screen effects must track the effects that have already been run so as to not re-run effects on every page refresh.
Run yarn dev
to build the content type and watch for changes, which will trigger a rebuild.
Before running unit tests, start the required Docker container at the root of this repository. For more info, see Running tests.
yarn build
: Builds the content typeyarn clean
: Removes node_modules
, dist
, and .turbo
foldersyarn dev
: Builds the content type and watches for changes, which will trigger a rebuildyarn format
: Runs prettier format and write changesyarn format:check
: Runs prettier format checkyarn lint
: Runs ESLintyarn test:setup
: Starts a necessary docker container for testingyarn test:teardown
: Stops docker container for testingyarn test
: Runs all unit testsyarn typecheck
: Runs tsc
FAQs
An experimental content type to support screen effects accompanying messages
We found that @xmtp/experimental-content-type-screen-effect demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.