
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
expo-pod-pinner
Advanced tools
The Pod Pinner plugin allows you to modify your Podfile in a managed workflow.
A Config Plugin for Expo to specify and pin pod versions directly in your project's Podfile without leaving the managed workflow.
This plugin is an Expo Config Plugin designed to enhance your Expo managed workflow by allowing direct modification of the Podfile
to pin specific CocoaPods dependencies to desired versions. With Expo Pod Pinner, you can ensure consistent dependency versions across installations and updates, enhancing project stability.
expo run:[android|ios]
)npx expo install expo-pod-pinner
Add the plugin to your plugin array in your project's configuration file. Configure any desired plugin props as follows:
app.json
{
"plugins": [
[
"expo-pod-pinner",
{
"targetName": "YourTargetName",
"pods": [
{ "PodName": "0.0.0" }
]
}
]
]
}
or
app.config.js
export default {
...
plugins: [
[
"expo-pod-pinner",
{
"targetName": "YourTargetName",
"pods": [
{ "PodName": "Version" }
]
}
]
]
};
Configure the plugin using the following props in the plugin config object:
Prop | Type | Description |
---|---|---|
targetName | string | The name of the target in your Podfile where the pods should be added. |
pods | array | An array of objects specifying the pod names and their versions. |
Prebuilding in Expo will result in the generation of the native runtime code for the project (and ios
and android
directories being built). By prebuilding, we automatically link and configure the native modules that have implemented CocoaPods, autolinking, and other config plugins. You can think of prebuild like a native code bundler.
When you run expo prebuild
we enter into a custom managed workflow which provides most of the benefits of bare workflows and managed workflows at the same time.
It may make sense to prebuild locally to inspect config plugin changes and help in debugging issues.
npx expo prebuild
# nukes changes and rebuilds
npx expo prebuild --clean
EAS Note: if you choose to stay in a fully managed workflow by not prebuilding, EAS will still run npx expo prebuild
at build time. You can also prebuild locally but remain in a fully managed workflow by adding the android
and ios
directories to your .gitignore.
Contributions, issues and feature requests are welcome!
Feel free to check issues page.
Give a ⭐️ if this project helped you!
FAQs
The Pod Pinner plugin allows you to modify your Podfile in a managed workflow.
The npm package expo-pod-pinner receives a total of 27 weekly downloads. As such, expo-pod-pinner popularity was classified as not popular.
We found that expo-pod-pinner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.