
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
react-native-flexbox-grid
Advanced tools
A Set of React Native Components to make a grid easier to reason about.
Responsive Design is easy on the web but a bit harder on a mobile app.
I'm experimenting with using a CSS type grid to have conditional looks based on device width similar to media queries.
In your react native project
npm install react-native-flexbox-grid
import {Column as Col, Row} from 'react-native-flexbox-grid';
<View style={styles.container}>
<Row size={12}>
<Col sm={6} md={4} lg={3}>
<Text>
First Column
</Text>
</Col>
<Col sm={6} md={4} lg={3}>
<Text>
Second Column
</Text>
</Col>
</Row>
</View>
The api is inspired by react-flexbox-grid, but it is not exactly the same.
The main difference is you can specify the grid size. By default <Row> is a size of 12. However if you want you can make a <Row> any size you want.
React Native now supports percentages as of 0.42. All of our versions going forward will rely on percentages. It has much faster performance compared to what we did before when we relied on onLayout. The API for apps is the same. There should be no difference in expected output of your app.
As of 0.2.0 Row will automatically wrap components. If you do not want components to automatically wrap you must specify nowrap in the row's prop.
<Row size={12} nowrap>
For react-native 0.41 and earlier you muse use react-native-flexbox-grid@0.2.0 or earlier.
Since React Native before 0.41 and earlier doesn't support percentages we have to rely on using React Native's onlayout to pass the width of the parent to the child. This causes layouts to be a bit slow, because the child has to wait for the parent to layout and then rerender. This problem is resolved by using react native 0.42 and the react-native-flexbox-grid@0.3.0 or later.
FAQs
Grid system for react native based on flexbox grid's api
We found that react-native-flexbox-grid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.