
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
expo-pod-pinner
Advanced tools
The Pod Pinner plugin allows you to modify your Podfile in a managed workflow.
A Config Plugin for Expo to specify and pin pod versions directly in your project's Podfile without leaving the managed workflow.
This plugin is an Expo Config Plugin designed to enhance your Expo managed workflow by allowing direct modification of the Podfile
to pin specific CocoaPods dependencies to desired versions. With Expo Pod Pinner, you can ensure consistent dependency versions across installations and updates, enhancing project stability.
expo run:[android|ios]
)npx expo install expo-pod-pinner
Add the plugin to your plugin array in your project's configuration file. Configure any desired plugin props as follows:
app.json
{
"plugins": [
[
"expo-pod-pinner",
{
"targetName": "YourTargetName",
"pods": [
{ "PodName": "0.0.0" }
]
}
]
]
}
or
app.config.js
export default {
...
plugins: [
[
"expo-pod-pinner",
{
"targetName": "YourTargetName",
"pods": [
{ "PodName": "Version" }
]
}
]
]
};
Configure the plugin using the following props in the plugin config object:
Prop | Type | Description |
---|---|---|
targetName | string | The name of the target in your Podfile where the pods should be added. |
pods | array | An array of objects specifying the pod names and their versions. |
Prebuilding in Expo will result in the generation of the native runtime code for the project (and ios
and android
directories being built). By prebuilding, we automatically link and configure the native modules that have implemented CocoaPods, autolinking, and other config plugins. You can think of prebuild like a native code bundler.
When you run expo prebuild
we enter into a custom managed workflow which provides most of the benefits of bare workflows and managed workflows at the same time.
It may make sense to prebuild locally to inspect config plugin changes and help in debugging issues.
npx expo prebuild
# nukes changes and rebuilds
npx expo prebuild --clean
EAS Note: if you choose to stay in a fully managed workflow by not prebuilding, EAS will still run npx expo prebuild
at build time. You can also prebuild locally but remain in a fully managed workflow by adding the android
and ios
directories to your .gitignore.
Contributions, issues and feature requests are welcome!
Feel free to check issues page.
Give a ⭐️ if this project helped you!
FAQs
The Pod Pinner plugin allows you to modify your Podfile in a managed workflow.
We found that expo-pod-pinner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.