Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
react-native-bugsnag
Advanced tools
Community-created Bugsnag package for React Native. It consumes the Bugsnag API to report errors from both the React Native (Javascript) environment AND the native (Obj-C or Java) environment.
Easily add Bugsnag exception monitoring support to your React Native application.
Although this is not affiliated with Bugsnag directly, we do have (some of) their support.
###Step 1
First of all go to the Busnag Dashboard and create one or more projects (read on to decide how many you need). You can:
p.s: One of the guys from Bugsnag told me that in time they plan to add a project of type hybrid
, that would have several benefits.
####More details about the lines above - if not interested move to Step 2
Below you can see how each error is handled based on what kind of project you setup in the Bugsnag dashboard.
ProjectTypes / Platform error | iOS native induced error | Android native induced error | React-Native javascript induced error |
---|---|---|---|
Bugsnag iOS project type | :white_check_mark: | :x: | :x: |
Bugsnag Android project | :x: | :white_check_mark: | :x: |
Bugsnag javascript project (one project for all errors) | :white_check_mark: | :white_check_mark: | :white_check_mark: |
p.s: Bugsnag claims to be working on a hybrid project type that can detect different types of stack traces better.
###Step 2
Install RNBugsnag (the javascript part of our library):
npm install react-native-bugsnag --save
or you could try to install it using rnpm
but I've never tested it.
Install the official iOS Bugsnag sdk into your app according to their iOS instructions.
I chose the Cocoapods
way meaning I just created a podfile in my projects iOS dir, added pod 'Bugsnag'
in the podfile, and ran pod install
.
In your AppDelegate.m
file, add the following code changes:
a. Import our RNBugsnag library:
#import <RNBugsnag/RNBugsnag.h> // Add this line.
@implementation AppDelegate
// ... other code
b. Initialize RNBugsnag inside of didFinishLaunchingWithOptions
:
- (BOOL)application:(UIApplication *)application didFinishLaunchingWithOptions:(NSDictionary *)launchOptions
{
// ... other code
[RNBugsnag init]; //initialize it
}
c. Add your BUSNAG Api Key inside the Info.Plist like so:
Add a new entry with a key of: `BUGSNAG_API_KEY` and a value of your Bugsnag API KEY ([Usually found within your project here](https://bugsnag.com/settings/)).
Opening the `Info.Plist` with a texBt editor your addition should look like this:
```
<key>BUGSNAG_API_KEY</key>
<string>whatever_your_api_key_is</string>
```
d. (Do this step ONLY if you installed using Carthage.) Add Bugsnag
to the RNBugsnag library. I did this by dragging the Bugsnag.framework
I made in step 1 to my RNBugsnag module target.
Go to your settings.gradle and add the following lines after
//somewhere after include ':app' add the following 2 lines
include ':react-native-bugsnag'
project(':react-native-bugsnag').projectDir = new File(rootProject.projectDir, '../node_modules/react-native-bugsnag/android')
Go to your app/settings.gradle and add the following line in the end:
dependencies {
compile fileTree(dir: 'libs', include: ['*.jar'])
compile 'com.android.support:appcompat-v7:23.0.1'
compile 'com.facebook.react:react-native:+'
//...whatever code
compile project(':react-native-bugsnag') //<--Add this line
}
Go to your manifest.xml
and add the following line within the application tag replacing YOUR_API_KEY
:
<meta-data android:name="com.bugsnag.android.API_KEY" android:value="YOUR_API_KEY"/>
Go to your MainApplication.java
and add the following code:
import com.pintersudoplz.rnbugsnag.RNBugsnagPackage;
and then within your getPackages
add the line with the comment
@Override
protected List<ReactPackage> getPackages() {
// ...whatever code
return Arrays.<ReactPackage>asList(
new MainReactPackage(),
new RNBugsnagPackage() //add this line
);
}
import Bugsnag from 'react-native-bugsnag';
Bugsnag(); //This initializes the singleton (CAUTION: The new keyword is never used with Bugsnag).
Congratulations!! You just initialized RNBugsnag. Note that we never used the new
keyword anywhere. Thats because Bugsnag() returns the same instance of the singleton no matter how many times you call it like so.
At that point you have basic native error reporting functionality working. Any unhandled javascript or native errors thrown will be reported to Bugsnag without any more lines of code.
suppressDevErrors
to true and passing it to the constructor, like so: Bugsnag({suppressDevErrors:true});
identifier
object to the constructor, like so: Bugsnag({identifier:{userId: "aUserId", userEmail:"anEmail@domain.com", userFullname:"aFullName"}})
After you've passed options to the constructor once, those options remain unchanged no matter how many times you call the constructor after that (Bugsnag
is a singleton). The only way to change those options from that point on is using setter methods.
This will let you know more details about the person that got the crash.
Bugsnag().setIdentifier("aUserId", "aUserEmail", "userFullname");
In order to understand what happened in your application before each crash, it can be helpful to leave short log statements that we call breadcrumbs. The last several breadcrumbs are attached to a crash to help diagnose what events lead to the error. – Bugsnag
Bugsnag().leaveBreadcrumb("some actions were done")
In order to distinguish between errors that occur in different stages of the application release process a release stage is sent to Bugsnag when an error occurs – Bugsnag
Bugsnag().setReleaseStage("staging");
Bugsnag uses the concept of “contexts” to help display and group your errors. Contexts represent what was happening in your application at the time an error occurs. – Bugsnag
Bugsnag().setContext("loginPage");
If you want to manually track in which versions of your application each exception happens, you can set appVersion. – Bugsnag
This will be useful when using OTA updates.
Bugsnag().setAppVersion(`${appBinaryVersion}(${codepushBundleVersion})`);
You can manually create an exception using the following command:
Bugsnag().notify("TestExceptionName", "TestExceptionReason", "error");
The third parameter is the severity of the notification, it can be one of the following:
In order to get a readable stacktrace with the exact place the error took place all you need to do is create sourcemaps for your app, then upload them to bugsnag and then make your project of type Javascript in the bugsnag dashboard, (you do that from their Settings screen). I did that and now I get a translated stacktrace I can read.
##Example code:
import RNBugsnag from 'react-native-bugsnag';
class AnExampleClass {
/**
* ## Constructor
*/
constructor( props ) {
RNBugsnag({suppressDevErrors:false, identifier:{userId: "aUserId", userEmail:"anEmail@domain.com", userFullname:"aFullName"}});
setTimeout(function(){
RNBugsnag().notify("WhateverError", "This error was just meant to be.", "error");
}, 3000);
}
};
FAQs
Community-created Bugsnag package for React Native. It consumes the Bugsnag API to report errors from both the React Native (Javascript) environment AND the native (Obj-C or Java) environment.
We found that react-native-bugsnag demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.