Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Jetifire tool migrates support-library-dependent libraries to rely on the equivalent AndroidX packages instead.
Jetifire tool migrates support-library-dependent
libraries to rely on the equivalent AndroidX
packages instead.
Created using nodejs
, it is dependency free and read/writes files asynchronously, that means it is very fast ⚡
This is a very fast Node
port of Mike Hardy's bash version (https://github.com/mikehardy/jetifier)
mkdir -p node_modules/testing
for i in {0..1000}
do
echo "import android.arch.core.util.Function;" > node_modules/testing/file_$i.java
done
Bash version
npx jetify : 44.994 seconds
This version
node . : 2.325 seconds
To install jetifire
, run the following command:
npm install --save jetifire
To process your libraries, simply run the jetifire
command by putting it in an npm script or as a post install script.
./node_modules/.bin/jetifire
postinstall
script to your package.json
: "postinstall": "jetifire"
Jetifire reads all your node_modules
folder and looks for .java
, .kotlin
and .xml
files, and then changes any android.support.*
imports to its corresponding androidx.*
.
If there is a type in an android.support.*
package that does not come from any support library artifact, Jetifire still migrates the type as long as there is a mapping for it. However, this migration is not guaranteed to work, as there might not be mapping rules general enough to cover all the custom types.
Mike Hardy - for the original React Native Jetifier tool
Licensed under the CreativeCommons Attribution 2.5 License
FAQs
Jetifire tool migrates support-library-dependent libraries to rely on the equivalent AndroidX packages instead.
The npm package jetifire receives a total of 13 weekly downloads. As such, jetifire popularity was classified as not popular.
We found that jetifire demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.