Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
scu-inspector
Advanced tools
Please, write issue or PR, if have any feedback.
It does not display after filtered by false in SCU. So you can just check what props were not apply by filtered.
I used to display by using console.log to check prop changes in Console tab. But it was hard to recognize what was changed or not. So, I implemented module to check as table view in Console tab to avoid annoying.
Purpose is displaying props changes of shouldComponentUpdate(React). It is designed to use by single component by using decorator. If you want to apply every React components by using just once, use 'why-did-you-update'.
npm install --save scu-inspector
Babel
"plugins": [
"transform-decorators-legacy"
]
Javascript (React)
import scuInspector from 'scu-inspector'
// with options
@scuInspector({
// [optional] display props changes
mode: 'changed', // all(default), changed, none
// [optional] default display name will be using component name
// but if you want to use unique string to recognize among components
uniqueKey: 'position', // key name of props
// [optional] it displays in Development Tool as console.table
// default is false
isCollapsed: true,
// [optional]
// logs off in production by default
// but you can turn it off or not manually
// default is true
debug: false,
// [optional] show specific keys of props
// ignoring exclude
include: ['name', 'homepage'],
// [optional] hide specific keys of props
exclude: ['age', 'address', 'location']
})
shouldComponentUpdate (nextProps) {
...
}
// without options
@scuInspector()
shouldComponentUpdate (nextProps) {
...
}
FAQs
Displaying props changes of shouldComponentUpdate
We found that scu-inspector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.