Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Jetifire tool migrates support-library-dependent libraries to rely on the equivalent AndroidX packages instead.
Jetifire tool migrates support-library-dependent
libraries to rely on the equivalent AndroidX
packages instead.
Created using nodejs
, it is dependency free and read/writes files asynchronously, that means it is very fast ⚡
s
This is a very fast Node
port of Mike Hardy's bash version (https://github.com/mikehardy/jetifier)
mkdir -p node_modules/testing
for i in {0..1000}
do
echo "import android.arch.core.util.Function;" > node_modules/testing/file_$i.java
done
Bash version
npx jetify : 44.994 seconds
This version
npx jetifire : 2.325 seconds
To install jetifire
, run the following command:
npm install --save jetifire
To process your libraries, simply run the jetifire
command by putting it in an npm script or as a post install script.
./node_modules/.bin/jetifire
Reverse mode
./node_modules/.bin/jetifire reverse
postinstall
script to your package.json
: "postinstall": "jetifire"
Jetifire reads all your node_modules
folder and looks for .java
, .kt
and .xml
files, and then changes any android.support.*
imports to its corresponding androidx.*
.
If there is a type in an android.support.*
package that does not come from any support library artifact, Jetifire still migrates the type as long as there is a mapping for it. However, this migration is not guaranteed to work, as there might not be mapping rules general enough to cover all the custom types.
Mike Hardy - for the original React Native Jetifier tool
Licensed under the CreativeCommons Attribution 2.5 License
FAQs
Jetifire tool migrates support-library-dependent libraries to rely on the equivalent AndroidX packages instead.
The npm package jetifire receives a total of 4 weekly downloads. As such, jetifire popularity was classified as not popular.
We found that jetifire demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.