Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
expo-pod-pinner
Advanced tools
The Pod Pinner plugin allows you to modify your Podfile in a managed workflow.
A Config Plugin for Expo to specify and pin pod versions directly in your project's Podfile without leaving the managed workflow.
This plugin is an Expo Config Plugin designed to enhance your Expo managed workflow by allowing direct modification of the Podfile
to pin specific CocoaPods dependencies to desired versions. With Expo Pod Pinner, you can ensure consistent dependency versions across installations and updates, enhancing project stability.
expo run:[android|ios]
)npx expo install expo-pod-pinner
Add the plugin to your plugin array in your project's configuration file. Configure any desired plugin props as follows:
app.json
{
"plugins": [
[
"expo-pod-pinner",
{
"targetName": "YourTargetName",
"pods": [
{ "PodName": "0.0.0" }
]
}
]
]
}
or
app.config.js
export default {
...
plugins: [
[
"expo-pod-pinner",
{
"targetName": "YourTargetName",
"pods": [
{ "PodName": "Version" }
]
}
]
]
};
Configure the plugin using the following props in the plugin config object:
Prop | Type | Description |
---|---|---|
targetName | string | The name of the target in your Podfile where the pods should be added. |
pods | array | An array of objects specifying the pod names and their versions. |
Prebuilding in Expo will result in the generation of the native runtime code for the project (and ios
and android
directories being built). By prebuilding, we automatically link and configure the native modules that have implemented CocoaPods, autolinking, and other config plugins. You can think of prebuild like a native code bundler.
When you run expo prebuild
we enter into a custom managed workflow which provides most of the benefits of bare workflows and managed workflows at the same time.
It may make sense to prebuild locally to inspect config plugin changes and help in debugging issues.
npx expo prebuild
# nukes changes and rebuilds
npx expo prebuild --clean
EAS Note: if you choose to stay in a fully managed workflow by not prebuilding, EAS will still run npx expo prebuild
at build time. You can also prebuild locally but remain in a fully managed workflow by adding the android
and ios
directories to your .gitignore.
Contributions, issues and feature requests are welcome!
Feel free to check issues page.
Give a ⭐️ if this project helped you!
FAQs
The Pod Pinner plugin allows you to modify your Podfile in a managed workflow.
The npm package expo-pod-pinner receives a total of 21 weekly downloads. As such, expo-pod-pinner popularity was classified as not popular.
We found that expo-pod-pinner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.