Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
@algolia/ui-library
Advanced tools
[![Build Status](https://travis-ci.com/algolia/ui-library.svg?token=xHy4ydCZHetFCp5sscyv&branch=develop)](https://travis-ci.com/algolia/ui-library)
A set of shareable, reusable UI components for Algolia interfaces, built in React. Complete list available here: https://algolia-ui-library.netlify.com/.
The goal of this library is to provide a set of React UI components that can be easily integrated into any Algolia project.
The design of these components is identical to the design found on algolia.com. The styles are using Algolia's custom version of Fragments.css.
npm install @algolia/ui-library --save
yarn add @algolia/ui-library
import React from 'react';
import { Button, Text } from '@algolia/ui-library';
const MyComponent = () => (
<div>
<Text>This is some text</Text>
<Button>This is a button</Button>
</div>
);
export default MyComponent;
yarn
or npm install
yarn storybook
or npm run storybook
Once you consider that the develop
branch holds enough changes to release a new version, here are the 3 steps to follow:
npm version [your_version]
. This will automatically:
develop
[your_version]
into develop
(this will update the package.json
version)[your_version]
into master
(this will update the Storybook).npm publish
to push the new release to npm.Important: don't delete your branch once merged. This will help keeping a clear history of previous changes.
FAQs
[![Build Status](https://travis-ci.com/algolia/ui-library.svg?token=xHy4ydCZHetFCp5sscyv&branch=develop)](https://travis-ci.com/algolia/ui-library)
The npm package @algolia/ui-library receives a total of 573 weekly downloads. As such, @algolia/ui-library popularity was classified as not popular.
We found that @algolia/ui-library demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 84 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.