
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
react-native-uni-carousel
Advanced tools
This small package is based on FlatList. It provides components to help create both a horizontal list of items and a paginated horizontal list of items.
This small package is based on FlatList. It provides components to help create both a horizontal list of items and a paginated horizontal list of items.
Simple FlatList card with some helper methods
<CardList
// Same as item width
spaceBetweenCards={marginBetweenCards * 2}
// Same as item margin
unselectedCardsWidth={otherCardsWidth}
render={({ item, index }, { width }) => (
// render of each item
)}
cards={[{ name: 'item1' }, { name: 'item2' }]}
options={options}
/>
spaceBetweenCards - Margin between cards
selectedIndex - Item that is selected on the list
onChangeSelected - Callback called when the selectedItem changes
unselectedCardsWidth - Space from the next and previous card that is shown
render(itemToRender, CardListContainerProps) - Render callback of every single item
cards - The array of items to render
options - Object of props that get directly passed to FlatList
Just a wrapper around CardList that handles the pagination and provides some callbacks to track page changes
<PaginatedCardList
// Same props as CardList (they get passed down to CardList, except cards)
pages={pages}
onChangePage={onChangePage}
/>
pages - Object with keys as numbers ({1: [page 1 array of items], 2: [page 2 array of items]}
onChangePage - Callback that gets called on page change
FAQs
This small package is based on FlatList. It provides components to help create both a horizontal list of items and a paginated horizontal list of items.
We found that react-native-uni-carousel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.