Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@algolia/ui-library
Advanced tools
[![Build Status](https://travis-ci.com/algolia/ui-library.svg?token=xHy4ydCZHetFCp5sscyv&branch=develop)](https://travis-ci.com/algolia/ui-library)
A set of shareable, reusable UI components for Algolia interfaces, built in React. Complete list available here: https://algolia-ui-library.netlify.com/.
Please read the detailed Migration guide for more details.
The goal of this library is to provide a set of React UI components that can be easily integrated into any Algolia project.
The design of these components is identical to the design found on algolia.com. The styles are using Algolia's custom version of Fragments.js.
npm install @algolia/ui-library --save
yarn add @algolia/ui-library
import React from 'react';
import { Button, Text } from '@algolia/ui-library';
const MyComponent = () => (
<div>
<Text>This is some text</Text>
<Button>This is a button</Button>
</div>
);
export default MyComponent;
For the CodeSample
component (located at src/components/CodeSample
), you'll need to generate static JSON files located at src/components/CodeSample/generatedHtml
in order to make it work with the smallest possible footprint: the library that handles syntax highlighting is heavy, that's why generating static JSON files prevents the client build from being too big.
To generate the static files, run:
yarn generate:codesample
If you want to contribute to this project:
yarn
or npm install
yarn storybook
or npm run storybook
Once you consider that the develop
branch holds enough changes to release a new version, here are the 5 steps to follow:
npm version [your_version]
. This will automatically:develop
have a look at the auto-generated CHANGELOG.md. Update some information manually if needed, commit and push it
create two PRs:
[your_version]
into develop
(this will update the package.json
version)[your_version]
into master
(this will update the Storybook).npm run deploy
to push the new release to npm.Important: don't delete your branch once merged. This will help keeping a clear history of previous changes.
Once you consider that the beta-vx
branch holds enough changes to release a new version, here are the 2 steps to follow:
bump the package.json version (last number)
run npm run version-beta
. This will automatically:
beta-vx
( x being your version number )FAQs
[![Build Status](https://travis-ci.com/algolia/ui-library.svg?token=xHy4ydCZHetFCp5sscyv&branch=develop)](https://travis-ci.com/algolia/ui-library)
We found that @algolia/ui-library demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 84 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.