Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@aleworm/rimble-web3-components
Advanced tools
React components for web3 that help developers build dApps faster with better user experiences
Rimble Web3 Components provides drop-in React components using Rimble-UI for common UX patterns in decentralized applications. This monorepo includes a utility library and independently versioned packages for each of these components.
Node - OS-dependent install instructions
Yarn - OS-dependent install instructions
This repo utilizes Storybook for component visualization and testing.
// Clone the repo
git clone git@github.com:ConsenSys/rimble-web3-components.git
// Change into the repository root
cd rimble-web3-components
// Install all dependencies from repository root directory
yarn install
// Watch for changes to all packages and automatically rebuild all packages. Use this with the `start storybook` command to preview components during development.
yarn start
Open a second terminal window
// From a different terminal session, change directory to Storybook inside the root repository
cd storybook
// Install Storybook
yarn install
// Start Storybook
yarn storybook
You can now edit components that are in the /package
directory and the changes will update in storybook.
├── node_modules
├── packages
│ ├── ConnectionBanner
│ │ ├── src
│ │ ├── test
│ │ ├── babel.config.js
│ │ ├── eslint.config.js
│ │ ├── jest.config.js
│ │ ├── prettier.config.js
│ │ ├── package.json
│ │ └── task -> ../../scripts/task
│ ├── NetworkIndicator
│ │ └── ... (same for all components)
│ ├── Utils
│ │ ├── src
│ │ ├── test
│ │ ├── babel.config.js
│ │ ├── eslint.config.js
│ │ ├── jest.config.js
│ │ ├── prettier.config.js
│ │ ├── package.json
│ │ └── task -> ../../scripts/task
│ └── ...
├── scripts
│ └── task
├── babel.config.js
├── eslint.config.js
├── jest.config.js
├── lerna.json
├── lint-staged.config.js
├── package.json
├── prettier.config.js
└── rollup.config.js
task
script that defines how tools are invoked by lernalerna publish
commandBootstrap packages with lerna
lerna bootstrap
Run linting on all packages
lerna run lint
Run tests on all packages
lerna run test
Compile libraries with Rollup
yarn build
Commit changes to libraries
git commit -am “commit message”
Version and publish updated packages to NPM
lerna publish
rimble-ui
yarn add rimble-ui
styled-components
yarn add styled-components
prop-types
yarn add prop-types
To publish a new package to NPM you must first manually create the package via the command line.
npm publish --access public
/storybook/src/stories
Pull requests will automatically generate an atomic build that is hosted on Netlify. The link to the hosted version will be posted in the PR.
Create link to local component in rimble-web3-components repository
cd packages/ConnectionBanner
yarn link
Link to local component in rimble-app-demo repository
yarn link @rimble/connection-banner
Modify webpack to fix multiple issues of styled-components
Need to customize webpack, but don’t want to eject:
Add packages:
yarn add -D react-app-rewired react-app-rewire-aliases
Create new file in root directory:
config-overrides.js
Paste snippet in config-overrides.js:
const rewireAliases = require('react-app-rewire-aliases');
const { paths } = require('react-app-rewired');
const path = require('path');
/* config-overrides.js */
module.exports = function override(config, env) {
config = rewireAliases.aliasesOptions({
'styled-components': path.resolve(
`${paths.appSrc}/../node_modules/styled-components`,
),
})(config, env);
return config;
};
Open an issue for any bugs or feature requests
We are open source and welcome your contributions !
MIT © ConsenSys
FAQs
React components for web3 that help developers build dApps faster with better user experiences
We found that @aleworm/rimble-web3-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.