Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
appetizer-bundle
Advanced tools
Creates an uploadable bundle of your React-Native application so it can run on
the appetize.io platform. It currently only supports ios
builds. Please note
that this module assumes you have a iOS build tool chain installed on your
system. As it needs to have access to the following CLI's:
zip
xcodebuild
npm install --save appetizer-bundle
The following arguments are required in the Bundle
constructor:
name
The name of your application as you configured it with react-native init
dir
The root directory of your React-Native app, this contains the ios
and
android
folders.const Bundle = require('appetizer-bundle');
const bundle = new Bundle('name of your application', 'path to your app dir');
This is the method that most people would be using, it chains all other methods in the correct order to generate a new build:
bundle.run(function (err, zipfile) {
if (err) {
// Handle errors
}
//
// Upload zipfile location using the appetizer library
//
});
Generates the offline React-Native bundle. The method expects 2 arguments:
bundle.offline(dir, (err) => {
if (err) {
// Handle errors
}
});
Rewrites the AppDelegate.m
so it points to new React-Native offline bundle.
The rewrite function is a bit special. It receives a restore
function as
second argument which restores the AppDelegate.m
to it's original state.
The restore
function accepts the following arguments:
err
An error that will be passed in the completion argument so you can clean
up, and forward it to the callback.next
Completion callback.bundle.rewrite((err, restore) => {
if (err) {
// Handle errors
}
restore(err, function (err) {
if (err) {
// Handle errors
}
});
});
Packs the resulting the application in a zip file so it can easily be uploaded
to the appetize.io service as it only accepts zip
or tar
files. The zip
callback receives the full path to the generated zip file as result.
bundle.zip(function (err, zipfilelocation) {
if (err) {
// Handle errors
}
//
// Upload zipfile location using the appetizer library
//
});
Read the given project directory and check if we have an xcode project or workspace we're dealing with. It requires the following arguments.
dir
The location where the project files should be located in.fn
Completion callback that receives error and a project object.The project object contains the following information:
name
Name of the filefile
Full file nameworkspace
Boolean indication if its a workspace.bundle.xcodeproj(dir, function (err, project) {
if (err) {
// Handle errors
}
console.log(project.file);
});
Generate a new iphonesimulator compatible xcode build. It expects a single argument which is an error first completion callback.
bundle.xcodebuild(function (err) {
if (err) {
// Handle errors
}
});
MIT
FAQs
Create/Bundle React-Native apps to on appetize.io
The npm package appetizer-bundle receives a total of 22 weekly downloads. As such, appetizer-bundle popularity was classified as not popular.
We found that appetizer-bundle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.