
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
create-react-native-plugin
Advanced tools
Template for creating React Native plugins without native code.
Starting point for creating React Native plugins without native code.
npm init -y react-native-plugin react-native-my-plugin
# or
npx create-react-native-plugin react-native-my-plugin
This will bootstrap a new plugin inside a folder named react-native-my-plugin
accordingly. Inside that folder the commands mentioned hereafter are available. The prefix react-native-
is optional and will be removed where the React Native context is implied.
Start working on your plugin by editing src/index.js
which will be the entry point for the plugin.
Since you probably don't want to blind-code the whole plugin use the following command to generate an up-to-date React Native app which includes the plugin:
npm run app
This will create an app inside /app
where except /app/App.js
all files are gitignored. Here you can try out various use cases of the plugin and use this as a way to demonstrate the plugin.
npm run watch
Running the above will watch the plugin /src/
folder for any kind of changes and copy them over to the app which will then automatically hot-reload.
Don't forget to always check your plugin both on Android and iOS even though your not using native code the provided components might still differ depending on the platform.
The template is configured to work with Jest out of the box. All non-native functionality can be tested from the terminal. With the following command you can run the tests which are found in a folder with the same name:
npm test
Since React Native will usually run in a modern JavaScript engine there is no need to transpile your source code and apps can directly use the plugin source code. The Flow type checker is the default type system for react native and the source code is writting in flow. While TypeScript is the more popular type checker overall flow is more popular in the React Native ecosystem and can be used out of the box. Therefore this package will only support flow.
If you have issues building the app for iOS try the following
sudo gem install cocoapods
app/ios
folder with pod update
The following plugins have been created with create-react-native-plugin as a starting point.
FAQs
Template for creating React Native plugins without native code.
The npm package create-react-native-plugin receives a total of 5 weekly downloads. As such, create-react-native-plugin popularity was classified as not popular.
We found that create-react-native-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.