Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
pixels-catcher
Advanced tools
Library for testing React Native UI components and screens
$ npm install pixels-catcher --save
The library depend on
react-native-save-view
which is used to convert View
to base64 data and has native implementation.
Therefore the linking is required and this can be easily done with the following
step:
$ react-native link react-native-save-view
If for some reasons it doesn't work, check official react native documentation.
Create new entry file, for example, indexSnapshot
, and import
registerSnapshot
, runSnapshots
and Snapshot
from pixels-catcher
:
import {
registerSnapshot,
runSnapshots,
Snapshot,
} from 'pixels-catcher';
After that create the snapshot component, which should extend Snapshot
and
implement static snapshotName
and renderContent
method. Be sure that your
component can accept collapsable
property, otherwise React can make an
optimization and drop the view. The implementation can be:
class AppSnapshot extends Snapshot {
static snapshotName = 'AppSnapshot';
renderContent() {
return (<App />);
}
}
after that register AppSnapshot
component:
registerSnapshot(AppSnapshot);
and trigger runSnapshots
which will register the application component and
run all snapshots:
runSnapshots(PUT_YOUR_APP_NAME_HERE);
Snapshots testing will be started as soon as the application is started.
There are two options to define config:
pixels-catcher.json
file in the root of the projectpackage.json
file with new property PixelsCatcher
And both of these two options should describe the configuration according to the following format:
PixelsCatcher: {
PLATFORM: {
...SHARED_CONFIGURATION,
CONFIGURATION: {
...CONFIGURATION_SPECIFIC
}
}
}
where
PLATFORM
can be android
or ios
CONFIGURATION
is a configuration with the following properties:
activityName
- Activity name, example: MainActivity.appFile
- [Optional] Path to apk file on adroid or app folder on iOS,
example: ./app/build/outputs/apk/debug/app-debug.apkdeviceName
- Device name, for example emulator: Nexus_5X or iOS:
iPhone 8 PlusdeviceParams
- [Optional] Array of emulator params like -no-audio,
-no-snapshot, -no-window, etc.packageName
- Android package name, example:
com.rumax.pixelscatcher.testappsnapshotsPath
- Path to snapshots, example: ./snapshotsImagesSHARED_CONFIGURATION
. In case more that one configurations exists, shared
parameters can be moved here.Example for package.json
configuration (or check
demo project):
"PixelsCatcher": {
"android": {
"activityName": "MainActivity",
"deviceName": "Nexus_5X",
"packageName": "com.rumax.pixelscatcher.testapp",
"snapshotsPath": "./snapshotsImages",
"debug": {
"deviceParams": ["-no-audio", "-no-snapshot"],
"appFile": "./android/app/build/outputs/apk/debug/app-debug.apk"
},
"release": {
"deviceParams": ["-no-audio", "-no-snapshot", "-no-window"],
"appFile": "./android/app/build/outputs/apk/debug/app-debug.apk"
}
},
"ios": {
"deviceName": "iPhone 8 Plus",
"packageName": "org.reactjs.native.example.testApp",
"snapshotsPath": "./snapshotsImagesIOS",
"dev": {},
"debug": {
"appFile": "./ios/build/Build/Products/Debug-iphonesimulator/testApp.app"
}
}
}
There are two options to run UI snapshots:
Using the generated apk
file, provided via the appFile
. In this case
pixels-catcher will open android emulator, install apk
file, execute all
the tests and will provide a report at the end. This scenario can be used
to integrate the screenshot testing with CI.
In cases appFile
is not defined, the development mode will be used. This
means that only the server will be started and the application should be
started manually. This scenario can be used to debug snapshots, create
new reference images, etc.
To run tests execute the following command:
$ ./node_modules/.bin/pixels-catcher android debug
By default the index.android.js
file is used which refer to your application.
To fix it, in android/app/build.gradle
add the following config:
project.ext.react = [
entryFile: System.getProperty("entryFile") ?: "index.js",
bundleInDebug: System.getProperty("bundleInDebug") ? System.getProperty("bundleInDebug").toBoolean() : false
]
And generate the apk
:
cd android && ./gradlew assembleDebug -DentryFile="indexSnapshot.js"
Same as android there are two options to run UI snapshots:
Using the generated app, provided via the appFile
. In this case
pixels-catcher will open iOS simulator, install app
, execute all
the tests and will provide a report at the end. This scenario can be used
to integrate the screenshot testing with CI.
In cases appFile
is not defined, the development mode will be used. This
means that only the server will be started and the application should be
started manually. This scenario can be used to debug snapshots, create new
reference images, etc.
To run tests execute the following command:
$ ./node_modules/.bin/pixels-catcher ios debug
To make a valid app you will need to do the following actions:
FORCE_BUNDLING
environment variable, which is required to generate
a bundle fileRCT_NO_LAUNCH_PACKAGER
to ignore the packagerYou can also check the demo
project and check the required changes.
Check the demo which includes an example how the snapshots can be done and also has some useful scripts that can be used to integrate with CI.
FAQs
UI snapshot testing for React Native
The npm package pixels-catcher receives a total of 36,698 weekly downloads. As such, pixels-catcher popularity was classified as popular.
We found that pixels-catcher demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.