
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@cloudbees/honeyui-react
Advanced tools
This project is React wrappers on top of HoneyUI Design Framework. It only provides JavaScript components can be used in React.js app and does not have any CSS.
Don't use this library!
This library is outdated and is no longer being developed. You should use [react-honeyui](https://github.com/cloudbees/honeyui/tree/master/packages/react-honeyui) which is based on [react-bootstrap](https://react-bootstrap.github.io/) and is part of the [honeyui](https://github.com/cloudbees/honeyui) UI kit.
| name | link |
|---|---|
| npm | https://www.npmjs.com/package/@cloudbees/honeyui-react |
| tests | todo link |
yarn installnpm run buildnpm version <major | minor | patch>git push origin <tag name>npm publishWhen you create a pull request, you can request or delete a specific group of reviewer on the pull request. You can also see a list of reviews requested.
yarn reviewer -h // shows the command help
The ./config/default.json file is used to configure the command.
local.json.This file overrides the default values and is ignored in .gitignore.
Sometimes you may want to make some change to honeyui-react and test it in your project before releasing honeyui-react. To do so follow the next steps:
cd ~/your-project/node_modules/@cloudbees/honeyui-react/
rm -rf dist
cp -R ~/honeyui-react/dist .
# To revert it:
# cd ~/your-project
# rm -rf node_modules/@cloudbees/honeyui-react/dist
# npm|yarn install
Every time you make a change in honeyui-react, you will have to build honeyui-react (yarn install will do it), and copy the dist folder again.
FAQs
CloudBees HoneyUI React components
We found that @cloudbees/honeyui-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.