
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
org.webjars.npm:workday__canvas-kit-css-core
Advanced tools
This project provides a set of components for the Workday Canvas Design System that can be used to implement user experiences consistent with Workday's design principles.
:white_check_mark: For a list of available react modules see Canvas Kit Component Status
Installation
To get started using Canvas kit React first add or install the module to your existing React project
yarn add @workday/canvas-kit-react
or
npm install @workday/canvas-kit-react
Usage
import * as React from 'react';
import {Button} from '@workday/canvas-kit-react';
<Button>Button Label</Button>;
Installation
To get started using Canvas kit CSS first add or install the module to your project
yarn add @workday/canvas-kit-css
or
npm install @workday/canvas-kit-css
Add your node_modules
directory to your SASS includePaths
. You will then be able to import
index.scss
.
Usage
@import '~@workday/canvas-kit-css/index.scss';
You must have PostCSS support. Add the postcss-inline-svg plugin to properly process and inline icons. Process your SASS through PostCSS once it has been compiled to CSS.
<button class="wdc-btn">Button Label</button>
If you spot a bug, inconsistency, or typo, please open a bug issue. Better yet, submit a pull request to addresses it.
If you have an idea, we would love to hear about it. The best way to suggest a feature is to open a feature issue. The Canvas Kit core team will take a look and discuss it with you.
Want to contribute to Canvas Kit React? Please read our contributing guidelines to find out more and how to get started.
All work on the Canvas Kit happens directly on GitHub. Both core team members and external contributors can send pull requests which go through the same review process. Any and all issues are public and available for discussion.
Canvas Kit follows semantic versioning and is enforced automatically by conventional commits (see "Commit Message Format").
Each module is independently versioned using Lerna.
The Workday Canvas Kits are licensed under the Apache 2.0 License.
Visual Testing by ChromaticQA
Builds by TravisCI
FAQs
WebJar for @workday/canvas-kit-css-core
We found that org.webjars.npm:workday__canvas-kit-css-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.