
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
pojo-router
Advanced tools
A hook based machanism to convert a string (i.e. a path) into metadata.
Define your metadata in a provider component.
import React from 'react';
import PojoRouter from 'pojo-router';
const namedPaths = {
page1: '/page1',
page2: { path: '/page2', sensitive: true },
page3: { path: '/page3/:id' },
};
const routes = [
['page1', { abc: 123 }],
['page2', { abc: 456 }],
['page3', { abc: 789 }],
['/page4', { abc: 0 }]
];
const notFound = { nothing: true };
const Router = ({ children }) => (
<PojoRouter namedPaths={namedPaths} routes={routes} notFound={notFound}>
{ children }
</PojoRouter>
);
Within your child component, use one of the hooks.
Sets or gets the "current path". This sets will use this path for all calls to useCurrentMatch
until a new path is set.
If a path is provided, it sets that path.
It always returns the current path.
Given a path, this returns all the metadata for routes that match.
Given a path, this returns the metadata for the first route that matches.
Given a path and a compareFunction (see Array.prototype.sort), this returns the metadata for the best route that matches based on the provided compare function.
When a path is set via useCurrentPath
, this returns the first match metadata for the current path that is set.
Given a named route (or route string if none is defined), this returns a function that will generate a matching string, including populating the dynamic variables. E.g. for a route like /entity/:id
an outbound routing function like entityPath({ id: 123 })
will generate /entity/123
.
FAQs
A react hooks library to associate metadata to a path
The npm package pojo-router receives a total of 1 weekly downloads. As such, pojo-router popularity was classified as not popular.
We found that pojo-router demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.