Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@aircall/tractor
Advanced tools
The Aircall Tractor design system Foundations.
Latest Published version available on: https://tractor.aircall.io/latest/ Next version available on: https://tractor.aircall-staging.com/next/
npm install --save @aircall/tractor @aircall/icons @aircall/hooks
yarn add @aircall/tractor @aircall/tractor @aircall/icons @aircall/hooks
import { Button, Tractor } from '@aircall/tractor';
const App = () => (
<Tractor injectStyle>
<Button>Click me</Button>
</Tractor>
);
You are ready to go 🚜 ⚡️
You must wrap your React Tree components using the
Tractor
component otherwise the Tractor components won't be able to grab thetheme
thus they will fail.
Please check the instructions on the main ReadME file
Make sure that your project is using a single version of React otherwise you will end up having errors:
Tractor comes with Aircall brand specifications, including colors, spacing, typography variants and more. It is highly recommended to stick with those default specifications.
In some cases, you app might need, for instance additional color tokens that are application specific. you can follow these instructions
Click on this link to learn more about how's to contribute.
FAQs
UI Component Library for Modern Design
The npm package @aircall/tractor receives a total of 3,463 weekly downloads. As such, @aircall/tractor popularity was classified as popular.
We found that @aircall/tractor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.