
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@artsy/reaction-force
Advanced tools
::::::::: :::::::::: ::: :::::::: ::::::::::: ::::::::::: :::::::: :::: :::
:+: :+: :+: :+: :+: :+: :+: :+: :+: :+: :+: :+:+: :+:
+:+ +:+ +:+ +:+ +:+ +:+ +:+ +:+ +:+ +:+ :+:+:+ +:+
+#++:++#: +#++:++# +#++:++#++: +#+ +#+ +#+ +#+ +:+ +#+ +:+ +#+
+#+ +#+ +#+ +#+ +#+ +#+ +#+ +#+ +#+ +#+ +#+ +#+#+#
#+# #+# #+# #+# #+# #+# #+# #+# #+# #+# #+# #+# #+#+#
### ### ########## ### ### ######## ### ########### ######## ### ####
$ git clone --recursive https://github.com/artsy/reaction.git
$ cd reaction
$ npm install -g yarn
$ yarn install
$ cp .env.oss .env
Development of components happen in storybooks:
$ yarn start
$ open http://localhost:9001/
Run the tests:
$ yarn test
Run the tests continuously (or use vscode-jest
):
$ yarn test -- --watch
In vscode, run the TypeScript: Run type-checker
task and open the PROBLEMS
view to see continuous type-checker
results.
After updating components, be sure to deploy a new demo (sharing is caring!):
$ yarn deploy-storybook
When using new changes in metaphysics’ schema, be sure to update the local schema copy:
$ yarn sync-schema
There are some suggested VSCode extensions in .vscode/extensions.json
and additional docs at docs/vscode.md.
Circle CI is set up to publish releases to NPM automatically via semantic-release following every successful merge to master.
Release versions (major, minor, patch) are triggered by commit messages, when they adhere to Ember conventions:
[TAG context] commit message
Valid tags for release include PATCH, DOC, FIX (patch), FEATURE (minor), and BREAKING (major). Commits that do not adhere to this convention will not trigger an NPM release.
[FIX onboarding] Modal does not open
[PATCH] Bump version
[FEATURE auctions] Add relay-based slider component
[BREAKING publishing] Replace children with props for caption editing
FAQs
Force’s React Components
The npm package @artsy/reaction-force receives a total of 18 weekly downloads. As such, @artsy/reaction-force popularity was classified as not popular.
We found that @artsy/reaction-force demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.