
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
react-social
Advanced tools
Simple React components for social (Facebook, Google, VKontakte, Pinterest ...) buttons and counts.
npm install react-social --save
import { FacebookButton, FacebookCount } from "react-social";
class App extends Component {
render {
let url = "https://github.com";
return (
<FacebookButton url={url} appId={appId}>
<FacebookCount url={url} />
{" Share " + url}
</FacebookButton>
);
}
}
WARNING: GooglePlusCount, TwitterCount and PocketCount uses the
donreach API which has a limit
of 1000 request per day, if you have an alternative please do not hesitate
to make a PR
Change the element the component renders into, default is span.
The url you want to get the count of, default is window.location.
Callback for when the count is updated. Callback takes one argument count.
Return the social count.
Change the element the component renders into, default is button.
The url you want to share, default is window.location.
The target you want to open, default is _blank.
A message that's prepended before the url.
Url of an image.
Facebook app id.
There are no styles included, the components pass all their props down
to their element like className and style so you can easily style
them yourself.
GooglePlusCount, TwitterCount and PocketCount uses the donreach API which has a limit of 1000 requests per day.MIT Licensed
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.