Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Feature flags for React made easy with hooks, HOC and Render Props
Install it from npm.
yarn add flagged
# npm i flagged
Import the FlagsProvider
in your code and wrap your application around it.
import { createRoot } from "react-dom/client";
import { FlagsProvider } from "flagged";
import { App } from "./components/app";
createRoot(document.getElementById("root")!).render(
<FlagsProvider features={{ v2: true }}>
<App />
</FlagsProvider>,
);
Now use useFeature
, withFeature
or Feature
to check if the feature is enabled in your application:
The features prop you pass to FlagsProvider
could be an array of strings or an object, if you decide to use an object you could also pass nested objects to group feature flags together.
Using an Array
createRoot(document.getElementById("root")!).render(
<FlagsProvider features={["v2", "moderate"]}>
<App />
</FlagsProvider>,
);
Using an Object
createRoot(document.getElementById("root")!).render(
<FlagsProvider features={{ v2: true, moderate: false }}>
<App />
</FlagsProvider>,
);
Using Nested Objects
createRoot(document.getElementById("root")!).render(
<FlagsProvider
features={{ v2: true, content: { moderate: true, admin: false } }}
>
<App />
</FlagsProvider>,
);
If you use nested objects you will need to either use the useFeatures
hook or pass a string separated by /
, e.g. content/moderate
to read nested flags, if you don't pass the whole path you will get an object so content
will return { moderate: false }
when reading it.
useFeature
Custom HookThe useFeature
custom hook is the base for the HOC and Render Prop implementation, it lets you check if a single feature is enabled and get a boolean, then you can do anything you want with that value, uesful to use it in combination with other hooks like useEffect or to show two different UIs based on a feature being enabled or not.
import { useFeature } from "flagged";
export function Header() {
const hasV2 = useFeature("v2");
return <header>{hasV2 ? <h1>My App v2</h1> : <h1>My App v1</h1>}</header>;
}
withFeature
High Order ComponentThis withFeature
high order component let's you wrap a component behind a feature flag, this way the parent component using your wrapped component doesn't need to know anything about the feature flag. This is useful when you don't need to provide a fallback if the feature is disabled, e.g. for admin pieces of UI or new features you want to hide completely.
import { withFeature } from "flagged";
export const Heading = withFeature("newHeading")(function Heading() {
return <h1>My App v2</h1>;
});
Feature
Render PropThe Feature
component works using the render prop pattern and as a wrapper. This component is useful if you want to hide an specific part of a component behind a feature flag but don't want to wrap the whole component.
Pass the name of the feature you want to check for and a children value and it will not render the children if the feature is enabled.
import { Feature } from "flagged";
export function Header() {
return (
<header>
<Feature name="v2">
<h1>My App v2</h1>
</Feature>
</header>
);
}
Another option is to pass a function as children and get a boolean if the feature is enabled, this way you can render two different pieces of UI based on the feature being enabled or not.
import { Feature } from "flagged";
export function Header() {
return (
<header>
<Feature name="v2">
{(isEnabled) => (isEnabled ? <h1>My App v2</h1> : <h1>My App v1</h1>)}
</Feature>
</header>
);
}
In both cases you could also send a render
prop instead of children
.
import { Feature } from "flagged";
export function Header() {
return (
<header>
<Feature name="v2" render={<h1>My App v2</h1>} />
</header>
);
}
import { Feature } from "flagged";
export function Header() {
return (
<header>
<Feature
name="v2"
render={(isEnabled) =>
isEnabled ? <h1>My App v2</h1> : <h1>My App v1</h1>
}
/>
</header>
);
}
useFeatures
Custom HookThe useFeatures
custom hook is the base for the useFeature
custom hook, it gives you the entire feature flags object or array you sent to FlagsProvider
so you could use it however you want.
import { useFeatures } from "flagged";
export function Header() {
let features = useFeatures();
return (
<header>{features.v2 ? <h1>My App v2</h1> : <h1>My App v1</h1>}</header>
);
}
FAQs
Feature flags for React made easy with hooks, HOC and Render Props
The npm package flagged receives a total of 22,955 weekly downloads. As such, flagged popularity was classified as popular.
We found that flagged demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.