Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@arcteryx/components-callout
Advanced tools
This library is Deprecated. It was used for the Virtual Advisor feature which we no longer use.
npm install --save @arcteryx/components-callout
(scroll down for usage on legacy apps)
The generic callout is a clickable callout element that slides into the page and contains text as well as some child element. When the close button is clicked, the callout will no longer appear for the user in the current session.
PROPS
text: The text that will show up at the bottom of the Callout
isActive: This will enable/disable the Callout
handleClick: The click handler function that is executed when the Callout is clicked
handleCloseButton: The click handler function that is executed when the Callout close button is clicked
child: The child component enclosed in the Callout will appear above the 'text' prop. You can add an image here.
CALL
The following is an example of calling the generic Callout component:
<Callout
text="Questions about product or sizing?"
isActive={true}
handleClick={e => handleClick(e)}
handleCloseButtonClick={handleCloseButtonClick}
>
<figure>
<Imgix
src={
"https://images-dynamic-arcteryx.imgix.net/virtual-advisor-callout/a6ff6a61-6c57-44ec-bdb0-dcae77bb05d6.png"
}
height={83}
imgixParams={{ auto: "format,compress", q: 75 }}
htmlAttributes={{ alt: "Virtual Advisor" }}
/>
<figcaption>Virtual Advisor</figcaption>
</figure>
</Callout>
CALL
VirtualAdvisor calls the generic Callout with props specific to the Virtual Advisor (see the props used in the above example)
<VirtualAdvisor />
As of v1.0.15 this package change to export ES modules, and not CommonJS. Therefore, newer versions don't work with our legacy apps (namely Category Display Pages, Web Bundles and the ecomm app).
To deal with this, those consuming apps are version-locked to an older version of components-callout. This commit is the last known working version for legacy: @arcteryx/components-callout@1.0.15
Should you find the need to hotfix this older version, here's the song and dance you'll need to do:
TL;DR https://stackoverflow.com/a/27665031
git checkout feature/callout-legacy-export
This is the last known working version for legacy apps
grep version package.json
Confirm this lines up with the latest 'legacy-export' version Callout Tags
[make your changes]
npm run build
npm version patch
The patch command will bump the version number
grep version package.json
Confirm the version number was bumped
npm publish --tag legacy-export
This published to npm, but doesn't overwrite the current latest version. You'll see your tagged version in the Versions tab, underneath the latest version, which will now be available for your consuming app to ... consume.
FAQs
Arcteryx callout
We found that @arcteryx/components-callout demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.