
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@artsy/palette-mobile
Advanced tools
Artsy's Design System on Mobile
Palette is a collection of primitive, product-agnostic elements that help encapsulate Artsy's look and feel at base level. This project is intended to be used across our digital product portfolio.
If the component applies to Artsy as a brand and can/will be used across multiple digital products, then Palette is a great place for it. If it's highly product specific then it's best to leave the component where it's used. We can always move things later!
The server-driven home view architecture launched in Eigen (Q4 2024) makes use of a standard library of home view section components.
Those components may make use of palette-mobile primitives, but they are not defined here. Instead they are defined directly in Eigen and documented in this Notion page.
If the above guidance still doesn't give you a good sense of what to do, please join the mobile practice meetings.
yarn add @artsy/palette-mobile
yarn add react-native-haptic-feedback react-native-linear-gradient react-native-reanimated react-native-svg
If you'd like to add a new component to Palette please create an issue using the component spec template. That'll give both design and engineering a chance to peek at the proposal and provide feedback before moving forward.
Set up using:
yarn setup:artsy
yarn install:all
Run using:
yarn start
And then either open Xcode and run, or Android Studio, or run yarn ios
or yarn android
from the command line, or just open up the simulator if you have done this before.
When developing new components in Palette, it's often useful to test those components in consuming apps (such as Eigen). However, due to the poor support for symlinks in React Native, this can be difficult. Enter yalc. Yalc is a mini package manager that one can publish to and install from, which makes it easy to test code in realtime from outside of your app.
Note: @artsy/palette-mobile uses Storybooks for developing features; work there first! Then, when ready (and if necessary), test your code locally using the flow described below. You can also publish npm canary releases from the palette-mobile repo by attaching a
canary
label to your PR.
yalc
globally:yarn global add yalc
palette-mobile
in the terminal and start the watcher:cd palette-mobile
yarn local-palette-dev
cd eigen
yarn local-palette-dev
yarn start
This will update package.json
to point at the yalc-published version of palette.
yarn local-palette-dev:stop
You can add this library using yarn add @artsy/palette-mobile
. Don't forget to also add all the peerDependencies
to your project.
For connecting Palette to a locally running version of our mobile apps, see these docs.
This project is the work of designers and engineers at Artsy, the world's leading and largest online art marketplace and platform for discovering art. One of our core Engineering Principles is being Open Source by Default which means we strive to share as many details of our work as possible.
You can learn more about this work from our blog and by following @ArtsyOpenSource or explore our public data by checking out our API. If you're interested in a career at Artsy, read through our job postings!
FAQs
Artsy's design system for React Native
The npm package @artsy/palette-mobile receives a total of 467 weekly downloads. As such, @artsy/palette-mobile popularity was classified as not popular.
We found that @artsy/palette-mobile demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.