
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@postnord/web-components
Advanced tools
This repo utilizes the Web Components compiler Stencil.js. The goal is to be able to provide re-usable components that the PostNord web teams can use to save time and get a holistic design. These components can be used in any popular framework or with no framework at all.
The library is intended to work with any other CSS framework you wish to use. As long as the CSS class names do not begin with "pn-" there should be no issues at all. However, we do recommend that you use the pn-design-assets package which the libary was intended to be used with. The design assets include fonts, icons and more that helps you get started.
The library is documented with the help of Storybook. You can view the latest documentation here.
Quick links:
# start exposed server at https://localhost:8000
npm run exposed
First time you need to go to https://localhost:8000 and accept the SSL warning.
Add the following code to the HTML section in codepen.io
<!-- If you want to register all componets we have at once -->
<script type="module" src="https://localhost:8000/postnord-web-components.esm.js"></script>
Defining infrastructure in code makes your setup repeatable, reviewable, and recoverable. You get the same stack every time (no snowflake environments), changes go through code review, and you can recreate or roll back environments quickly if something goes wrong.
This project uses Open Serverless Framework with AWS CloudFormation under the hood to provision:
We use two Serverless stages:
The stack name is ${service}-${stage} (e.g., web-components-test, web-components-prod).
npx sls deploy --stage test
When you’re happy with test, promote to prod:
npx sls deploy --stage prod
Make changes to serverless.yml (e.g., cache policies, priceClass: PriceClass_100, OAC/OAI choices, custom domain). Then:
npx sls deploy --stage test
npx sls deploy --stage prod
To delete the stack and all managed resources:
npx sls remove --stage test
npx sls remove --stage prod
Be careful—this removes the CloudFormation stack and may delete the S3 bucket contents if the bucket is not retained.
FAQs
PostNord Web Components
The npm package @postnord/web-components receives a total of 832 weekly downloads. As such, @postnord/web-components popularity was classified as not popular.
We found that @postnord/web-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 67 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.