Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
react-native-search-api
Advanced tools
A React Native module that allows to perform the Spotlight integration on iOS
The SearchApi
module gives you a general React Native interface to interact with the iOS Search API, Core Spotlight.
For more information about iOS Search APIs, see https://developer.apple.com/ios/search/.
npm install react-native-search-api --save
react-native link
To the top of your AppDelegate.m
add the following line:
#import "RCTSearchApiManager.h"
In your AppDelegate implementation add the following:
- (BOOL)application:(UIApplication *)application continueUserActivity:(NSUserActivity *)userActivity restorationHandler:(void (^)(NSArray * _Nullable))restorationHandler {
return [RCTSearchApiManager application:application continueUserActivity:userActivity restorationHandler:restorationHandler];
}
Subscribe to the search item open events in your components like this:
componentDidMount() {
<...>
SearchApi.addOnSpotlightItemOpenEventListener(this.handleOnSpotlightItemOpenEventListener);
SearchApi.addOnAppHistoryItemOpenEventListener(this.handleOnAppHistoryItemOpenEventListener);
}
To prevent memory leaks don't forget to unsubscribe:
componentWillUnmount() {
<...>
SearchApi.removeOnSpotlightItemOpenEventListener(this.handleOnSpotlightItemOpenEventListener);
SearchApi.removeOnAppHistoryItemOpenEventListener(this.handleOnAppHistoryItemOpenEventListener)
}
In order to create a new spotlight item, use indexSpotlightItem
or indexSpotlightItems
:
SearchApi.indexSpotlightItem(item).then(result => {
console.log('Success');
}).catch(err => {
console.log('Error: ' + err);
});
To add new items to the app history, use createUserActivity
:
SearchApi.indexAppHistoryItem(item).then(result => {
console.log('Success');
that.setState({labelText: 'Success'});
}).catch(err => {
console.log('Error: ' + err);
that.setState({labelText: ('Error: ' + err)});
});
The parameters, that items may specify are listed below:
Dictionaries, passed to create spotlight and app history items have some common and some specific keys, here is the list of all possible keys.
title
: stringTitle of the item. Required for both item types.
contentDescription
: stringDescription of the item. Optional.
keywords
: ArrayAn array of keywords, assigned to the search item. Optional.
thumbnail
: string|int|objectThumbnail to be presented in the search results. The same format as source
in
the Image
component. Refer to documentation. Optional.
uniqueIdentifier
: stringThe unique identifier of the spotlight item, passed later on during the item opening event. Required.
domain
: stringThe domain for the spotlight item. Optional.
userInfo
: ObjectA dictionary, passed later on during the item opening event. Required.
eligibleForPublicIndexing
: booleanA flag, that when set to true
allows to add the item to the public index.
Optional.
expirationDate
: DateExpiration date of the user activity item. Optional.
webpageURL
: stringURL of the page, representing the same content on the app's website.
FAQs
A React Native module that allows to perform the Spotlight integration on iOS
We found that react-native-search-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.