Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
react-native-shimmer
Advanced tools
Simple shimmering effect in React Native. Based on Shimmer.
$ yarn add react-native-shimmer
react-native link
$ react-native link react-native-shimmer
Add ios/RNShimmer.xcodeproj
to Libraries and add libRNShimmer.a
to Link Binary With Libraries under Build Phases. More info and screenshots about how to do this is available in the React Native documentation.
Add the following to your Podfile
and run pod update
:
pod 'react-native-shimmer', :path => 'node_modules/react-native-shimmer'
NOTE: Shimmer
may only have one child and currently doesn't work with View
.
import Shimmer from 'react-native-shimmer';
<Shimmer>
<Text>Loading...</Text>
</Shimmer>
Prop | Description | Default |
---|---|---|
animating | Wether or not to show shimmering effect. | true |
direction | The direction of shimmering animation, valid values are up , down , left , right . | right |
pauseDuration | The time interval between shimmerings in milliseconds. | 400 |
animationOpacity | The opacity of the content while it is shimmering. | 0.5 |
opacity | The opacity of the content before it is shimmering. | 1 |
speed | The speed of shimmering, in points per second. | 230 |
highlightLength | The highlight length of shimmering. Range of 0–1. | 1 |
beginFadeDuration | The duration of the fade used when shimmer begins. | 0.1 |
endFadeDuration | The duration of the fade used when shimmer ends. | 0.3 |
MIT License. Shimmer is under BSD license. © Joel Arvidsson 2016-now
FAQs
Simple shimmering effect in React Native
The npm package react-native-shimmer receives a total of 3,290 weekly downloads. As such, react-native-shimmer popularity was classified as popular.
We found that react-native-shimmer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.