
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
react-native-android-env
Advanced tools
Declare config variables in Gradle, under android/app/build.gradle:
android {
defaultConfig {
buildConfigField "String", "API_URL", '"https://myapi.com"'
buildConfigField "Boolean", "SHOW_ERRORS", "true"
...
Then access those from javascript:
var Config = require('react-native-android-config');
Config.API_URL // "https://myapi.com"
Config.SHOW_ERRORS // true
n case you're wondering how to keep secrets outside your source: create android/config.properties:
API_URL="https://:secret@myapi.com"
Then load it from build.gradle like:
defaultConfig {
def props = new Properties()
props.load(new FileInputStream(rootProject.file('config.properties')))
props.each { key, val -> buildConfigField "String", key, val }
}
You can do something similar under release in buildTypes to read a different set of credentials from another file.
Include this module in android/settings.gradle:
include ':react-native-android-config'
include ':app'
project(':react-native-android-config').projectDir = new File(rootProject.projectDir,
'../node_modules/react-native-android-config/android')
Add a dependency to your app build in android/app/build.gradle:
dependencies {
...
compile project(':react-native-android-config')
}
Change your main activity to add a new package, in android/app/src/main/.../MainActivity.java:
import com.lugg.ReactConfig.ReactConfigPackage; // add import
public class MainActivity extends Activity implements DefaultHardwareBackBtnHandler {
private ReactInstanceManager mReactInstanceManager;
private ReactRootView mReactRootView;
@Override
protected void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
mReactRootView = new ReactRootView(this);
// initialize our PhotoRequest handler
mPhotoRequest = new ReactPhotoRequestPackage(this);
mReactInstanceManager = ReactInstanceManager.builder()
.setApplication(getApplication())
.setBundleAssetName("index.android.bundle")
.setJSMainModuleName("index.android")
.addPackage(new MainReactPackage())
.addPackage(new ReactConfigPackage()) // add the package here
see react-native-android-config for usage.
FAQs
React Native bridge to Android build configs set in Gradle
The npm package react-native-android-env receives a total of 0 weekly downloads. As such, react-native-android-env popularity was classified as not popular.
We found that react-native-android-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.