Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
A command line tool for developing React Native apps
Haul is a drop-in replacement for react-native
CLI built on open tools like Webpack. It can act as a development server or bundle your React Native app for production.
Start by adding Haul as a dependency to your React Native project (use react-native init MyProject
to create one if you don't have a project):
yarn add --dev haul-cli
If you're on a React Native version >= 0.43, add the following in android/app/build.gradle
somewhere before the apply from: "../../node_modules/react-native/react.gradle"
statement:
project.ext.react = [
cliPath: "node_modules/haul-cli/bin/cli.js"
]
To configure your project to use haul, run the following:
yarn run haul init
This will automatically add the configuration needed to make Haul work with your app, e.g. add webpack.haul.js
to your project, which you can customise to add more functionality.
Next, you're ready to start the development server:
yarn run haul start -- --platform ios
Finally, reload your app to update the bundle or run your app just like you normally would:
react-native run-ios
Check out the docs to learn more about available commands and tips on customizing the webpack configuration.
Haul uses a completely different architecture from React Native packager, which means there are some things which don't work quite the same.
We are actively working on adding support for the following:
react-native
commandsThe following features are unlikely to be supported in the future:
webpack.haul.js
config insteadnode_modules
: transpile your modules before publishing, or configure webpack not to ignore themFAQs
Haul is a new command line tools for React Native
We found that haul-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.