
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
victory-native
Advanced tools
Install victory-native:
$ npm install victory-native --save
Install react-native-svg:
$ npm install react-native-svg --save
Link react-native:
$ react-native link react-native-svg
NOTE: Please read about Peer Dependencies and Version Requirements
Import charts from victory-native
. For example,
import React, { Component } from "react";
import { VictoryBar } from "victory-native";
class App extends Component {
render() {
return (
<VictoryBar />
);
}
}
export default App;
Note: victory-native
requires the following peer dependencies:
react-native-svg
react
react-native
Note: react-native-svg
has strict version requirements for both react
and react-native
. Please match versions to those required by react-native-svg
. See the up-to-date requirements on the react-native-svg Readme.
We encourage you to use the latest version of react-native-svg
possible for your project, as victory-native
issues are frequently solved by react-native-svg
bugfixes.
victory-native@~0.15.0
requires react-native-svg@^5.0.0
victory-native@~0.16.0
requires react-native-svg@6.0.0
victory-native@~0.16.2
requires react-native-svg@6.0.1-rc.1
If you'd like to contribute to victory-native
, you can use the local demo app to test your changes on the iOS simulator. (But if you're just getting started with victory-native
and want to see a demo, we recommend using victory-native-demo, as it supports Android and is simpler to set up.)
# Install
$ npm install -g react-native-cli # if you haven't already
$ git clone https://github.com/FormidableLabs/victory-native
$ cd victory-native
$ npm install
# Start the react-native packager in a terminal that will remain running
$ npm start
# Run the demo from a new terminal window
$ npm run demo:ios
Changes to lib
will be reflected in the demo app.
Do not run npm install
in the demo/
directory, or the packager packager will crash due to
"duplicate @providesModule declarations" found in node_modules/
and demo/node_modules
.
See the docs and examples on the website https://formidable.com/open-source/victory/docs/native
This project is in a pre-release state. We're hard at work fixing bugs and improving the API. Be prepared for breaking changes!
SEMVER Minor version bumps should be considered breaking changes until we hit v1.0.0. Patches can be considered safe.
Please review our Code of Conduct before contributing.
FAQs
[](https://commerce.nearform.com/open-source/victory-native/)
The npm package victory-native receives a total of 108,316 weekly downloads. As such, victory-native popularity was classified as popular.
We found that victory-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.