Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
i18n-react
Advanced tools
React (JS) text internationalization and externalizing. Markdown-ish syntax with variables support (including of react element type).
var ReactDOM = require('react-dom');
var React = require('react');
const { MDText } = require('i18n-react');
const T = new MDText({
greeting: "#Hello, World!\n My name is **{myName}**! \n {{howAreYou}}",
howAreYou: "_How do you do?_"
}, { MDFlavor: 1 });
ReactDOM.render(
<T.span text={{ key: "greeting", myName: "i18n-react" }}/>,
document.getElementById('content')
);
Unsurprisingly renders:
My name is i18n-react!
How do you do?
Usually texts are retrived from an extrenal source (I would recommend YAML format) but loading of the external files is out of scope for the library.
greetings:
hello: Hi, {who}!
howdy:
formal: How do you do?
normal: How are you, {who}?
informal: "What's up?"
bye: Bye
longTime:
0: Not a day no see
1: 1 day no see
'2..4': A few days no see
_: "[{context} days][Long time no see]"
Points of interest:
Npm compatible packager (browserify/webpack) is recommended, but Dist
folder also contains UMD versions
(regular and minified) that can be used w/o commonJS packager.
/* ES6 & TS */
import T from 'i18n-react';
/* commonJS */
var T = require('i18n-react').default;
/* when using UMD version w/o modules */
var T = window['i18n-react'].default;
Setup once - probably in an application entry point js:
T.setTexts({
greeting: "Hello, World! My name is *{myName}*! \n {{howAreYou}}",
howAreYou: "_How do you do?_"
}, { MDFlavor: 0 });
/* or if there is yaml/json loader */
var dictionary = require('../texts/texts-en.yml');
T.setTexts(dictionary);
Use it anywhere:
<T.a text="path.to.string" href="a's href"/>
<T.text tag='h1' text="path.to.string" context: "context-if-any"/>
<T.p text={{ key: "path.to.string", var1: "string", var2: 2}} anyValidHtmlAttribute="p.will.have.it"/>
<T.span text={{ key: "path.to.string", context: "context-if-any", var1: "string", var2: 2, var3: <span className="c">X</span>}}/>
<h1>{T.translate("path.to.string", { context: "context", val: 1})}</h1>
In case you want to control lifecycle of the dictionary object (instead of default singleton) it can be created with MDText constructor.
import { MDText } from 'i18n-react';
let T = new MDText({...});
let x = T.translate("path.to.string");
<T.span text="path.to.string" />
MDText object can be passed in the react 16.3+ context. See examples/yaml for complete example.
import { MDText } from 'i18n-react';
let MDTextContext = React.createContext();
let Texts = new MDText({...});
<MDTextContext.Provider value={Texts}>
<MDTextContext.Consumer>{ (T) =>
<T.span text="path.to.string" />
}</MDTextContext.Consumer>
</MDTextContext.Provider>
Text attribute is a key that should point to string or JSON object, it has to be present in the language resource. Then if needed the context is used to disambiguate betwen multiple texts according to the following rules:
By default if translation for the specified key is not present the key itself is returned
to help you find the missing translation.
This behaviour can be augmented by passing custom notFound
value to setText options or MDText contructor.
This value can be either a string, or a function returning a string. If it is a string, then it will be returned as is any time a key is missing. If you provide a function, then the function will be run with the missing key and context as arguments.
// "Not Found!" will replace all missing translations
T.setTexts(translations, {
notFound: 'Not Found!'
})
// "SomeKey <-- this guy" will appear instead
T.setTexts(translations, {
notFound: key => `${key} <-- this guy`
})
// you can combine this solution with markdown!
T.setTexts(translations, {
notFound: key => `**${key}**` // will render <strong>SomeKey</strong>
})
Translation dictionaries can be extended with functions (as in notFound).
T.setTexts({
a: 'A',
n: (_key, ctx) => ctx ? `Number ${ctx}` : '',
});
T.translate('a')) // 'A'
T.translate('n', { context: 9 })) // 'Number 9'
*italic*
italic - <em>
breaking change V1, <strong>
in V0_italic_
italic - <i>
breaking change V1, <em>
in V0**bold**
bold <strong>
new - V1__bold__
bold <b>
new - V1~underlined~
underlined <u>
new - V1~~strike~~
<strike>
new - V1\n
New Line <br>
[Paragraph 1][Paragraph 2]
Multiple paragraphs <p>
#
-####
Headers <h1>-<h4>
You are welcomed to consult examples folder and unit tests for usage details and examples.
Allows matching number of backticks (with optional whitespace) to form a literal. This allows quoting of the backtick pairs: ``` `` ```
=> ``
.
New `` syntax `` (in V1 only) to disable MD processing.
As React now allows fragments and strings in render the default behavior of <T.text>
changed not to wrap the output into <span>
when tag
property is not specified.
The new MD flavor (aligned with github's Markdown) is added : V1. Opt-in for this release, will become default in the next major release.
V1 introduces strike and underline, and rehabilitates <b>
and <i>
tags.
em: "an *italic* style"
i: "an _italic_ style"
strong: "a **bold** move"
b: "a __bold__ move"
u: "an ~underlined~ word"
strike: "a ~~strike~~ out"
To opt-in for the new syntax:
let T = new MDText(texts, { MDFlavor: 1 });
// or for the singelton
T.setTexts(require('../texts/texts-en.yml'), { MDFlavor: 1, notFound: 'NA' });
MDText notFound property is deprecated - please switch to constructor or serTexts options.
React 15.2 is preparing to stop filtering HTML properties (https://fb.me/react-unknown-prop) - the feature that i18n relied upon for preventing interpolation variables from leaking into the DOM.
Thus new syntax for passing variables is introduced:
<T.span text={{ key: "greeting", myName: "i18n-react" }}/>
/* replaces */
<T.span text="greeting" myName="i18n-react"/>
All tags passing to T.* anything beside text
, tag
and context
properties have to be updated or React 15.2 will cry annoyingly.
Updated package.json contains all the info for the new typescript to get typings automatically.
$ npm start
$ npm run build
$ npm run examples
(http://localhost:1818/webpack-dev-server/examples/)$ npm run build:examples
$ npm test
$ npm run test:watch
FAQs
React JS text internationalization and externalizing
The npm package i18n-react receives a total of 5,503 weekly downloads. As such, i18n-react popularity was classified as popular.
We found that i18n-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.