Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
glamorous-native
Advanced tools
A react-native port of paypal/glamorous (inspired via https://github.com/paypal/glamorous/issues/7). Glamorous is React component styling solved with an elegant (inspired) API, small footprint, and great performance.
In React Native, we write styles within our JS, but you don't like having to create entire component functions just for styling purposes. You don't wnat to give a name to something that's purely style-related. And it's kind of annoying to do the StyleSheet.create
, conditionals, and props-forwarding song and dance.
For example, this is what you have to do with StyleSheet
:
const styles = StyleSheet.create({
text: {
fontSize: 20,
textAlign: 'center'
}
})
function MyStyledText ({style, ...rest}) {
return (
<Text
style={[styles.text, style]}
{...rest}
/>
)
}
With glamorous-native
, that example above looks as simple as this:
const MyStyledText = glamorous.text({
fontSize: 20,
textAlign: 'center';
})
In fact, it's even better, because there are a bunch of features that make composing these components together really nice!
Oh, and what if you don't care to give MyStyledText
a name? If you just want a text that's styled using StyleSheet
? You can do that too:
import {Text} from 'glamorous';
function Section() {
return (
<Text
fontSize={20}
textAlign="center"
>
Hello world!
</Text>
)
}
See more examples!
So that's the basics of this solution.. Let's get to the details!
TBD
This project is in active development approaching completion. Your contributions are welcome! Take a look at the contributing guide and browse through the good first task issues.
FAQs
React glamorous library for React Native
The npm package glamorous-native receives a total of 45 weekly downloads. As such, glamorous-native popularity was classified as not popular.
We found that glamorous-native demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.