
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
react-fetch-streams
Advanced tools
A react hook for using the Streams API with the Fetch API to stream data from a server.
You can install this package from NPM:
npm add react-fetch-streams
Or with Yarn:
yarn add react-fetch-streams
For CDN, you can use unpkg:
https://unpkg.com/react-fetch-streams/dist/index.min.js
The global namespace for react-fetch-streams is reactFetchStreams
:
<script type="text/javascript" src="https://unpkg.com/react-fetch-streams/dist/index.min.js"></script>
<script type="text/javascript">
const {useStream} = reactFetchStreams;
...
</script>
Stream some data from some server:
import React, {useCallback, useState} from 'react';
import {useStream} from 'react-fetch-streams';
const MyComponent = props => {
const [data, setData] = useState({});
const onNext = useCallback(async res => {
const data = await res.json();
setData(data);
}, [setData]);
useStream('http://myserver.io/stream', {onNext});
return (
<React.Fragment>
{data.myProp}
</React.Fragment>
);
};
You can also pass the fetch request init props using fetchParams
:
import React, {useCallback, useState} from 'react';
import {useStream} from 'react-fetch-streams';
const fetchParams = {mode: 'cors'}
const MyComponent = props => {
const [data, setData] = useState({});
const onNext = useCallback(async res => {
const data = await res.json();
setData(data);
}, [setData]);
useStream('http://myserver.io/stream', {onNext, fetchParams});
return (
<React.Fragment>
{data.myProp}
</React.Fragment>
);
};
For more examples, please check the tests.
You can expect this hook to work wherever the following APIs are supported:
Check browserslist.dev for an overview.
If you wish to contribute, please use the following guidelines:
FAQs
React hook for the Streams API
The npm package react-fetch-streams receives a total of 333 weekly downloads. As such, react-fetch-streams popularity was classified as not popular.
We found that react-fetch-streams demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.