Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Is an easy to use integration for Next.js to enable i18next translations on your application with support for SSR, SSG and Client translation loading.
It gives you freedom to use i18next
with a lot of different customizations, while still being compatible with next.js
.
Ni18n
also does not directly depend on i18next
nor react-i18next
, allowing you to update these dependencies without having to wait for any action on our part.
yarn add i18next react-i18next ni18n
npm install i18next react-i18next ni18n
import {
appWithI18Next,
loadTranslations,
clientNamespaces,
useSyncLanguage,
} from 'ni18n'
Read the docs at Getting Started or on the website https://jcquintas.gitbook.io/ni18n/usage/getting-started
When running on Vercel we are unable to load the translation files automatically because the vercel/nft package doesn't bundle files requested by a third party lib.
A work around is to create a wrapper around loadTranslations
that calls path.resolve('./', './public/locales')
, and then use this function instead of the exported by the ni18n
package.
import { loadTranslations as ni18nLoadTranslations } from 'ni18n'
import { ni18nConfig } from '../ni18n.config'
export const loadTranslations = async (
initialLocale?: string | undefined,
namespacesNeeded?: NamespacesNeeded | undefined,
) => {
const locales = path.resolve('./', './public/locales')
return await ni18nLoadTranslations(
ni18nConfig,
initialLocale,
namespacesNeeded,
)
}
You can read more on #49
FAQs
Simple and powerful i18next integration for next.js
We found that ni18n demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.