
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@automatic-labs/ui-components
Advanced tools
Automatic's React Application Framework is used for rendering component data consistently from project to project. Components are available as importable React components and can be used to create a wide range of product experiences.
The most thorough documentation is in form of Storybook and can be found on this repository's GitHub Pages https://automatic.github.io/ui-components
It can also be worthwhile to look into dev/
directory of this repository for development hands on examples. To run the examples go with
npm run dev
npm i --save @automatic-labs/ui-components
npm run release [patch|minor|major]
To publish the npm package
npm run push
This will make sure you are publishing basedon the latest build and from within build's directory.
import { Layout } from '@automatic-labs/ui-components/layout';
A fundamental base component used as a responsive container for other components.
import {
ContentActionButton,
ContentActionGroup,
ContentActionInline,
ContentActionSwitch,
ContentBulletedList,
ContentCard,
ContentCardLabel,
ContentClearButton,
ContentCover,
ContentData,
ContentError,
ContentErrorMessage,
ContentHeader,
ContentLoading,
ContentParagraph,
ContentRecordList,
ContentRecord,
ContentSearchBar,
ContentSection,
ContentTable,
ContentTableHeader,
ContentTableRow,
ContentTitle
} from '@automatic-labs/ui-components/content';
Main content presentation components to consistently present information, records, actions and other content to the user.
import {
InputFile,
InputSelect,
InputSelector,
InputSlider,
InputText,
InputTextArea
} from '@automatic-labs/ui-components/input';
Set of input components on top of native inputs.
import {
AddressPicker,
LocationIcon,
LocationPicker,
LocationRecord,
MapPicker
} from '@automatic-labs/ui-components/location';
Location-specific components allowing user to pick his location based on map position or selected address.
import { MapBox } from '@automatic-labs/ui-components/maps';
Maps integration, currently only Mapbox integration is available.
import {
NavBar,
NavBreadcrumbs
NavItem,
NavFooter,
NavFooterItem,
NavMasthead,
NavMenu,
NavMobileControl,
NavSideMenu
} from '@automatic-labs/ui-components/nav';
Top and bottom navigation bars for web experiences requiring high-level navigation.
import {
Flow,
FlowButton,
FlowButtonGroup,
FlowStep
} from '@automatic-labs/ui-components/flow';
Used to guide a user through a flows and capturing input.
There is also a set of preimplemented specialized steps available under flow/step
namespace
import {
ErrorStep,
FileStep,
GenericStep, // aids stateful step implementation
InputStep,
InternalErrorStep,
LocationStep,
NetworkErrorStep,
ProcessStep,
SelectStep,
SelectorStep,
SliderStep,
TooManyTriesErrorStep,
UnauthorizedErrorStep
} from '@automatic-labs/ui-components/flow/step';
import authAPI, {
AuthSSoMenu,
AuthSSONavItem
} from '@automatic-labs/ui-components/auth';
Includes special components related to site authentication and single-sign-on. AuthAPI service is available as a default export.
import {
OfflineAware,
OfflineStateBar
} from '@automatic-labs/ui-components/offline';
Tools and components aiding offline awareness.
import '@automatic-labs/ui-components/styles/main'
Includes colors and sizing mixing to be used in your own custom components.
FAQs
Automatic Frontend Components
The npm package @automatic-labs/ui-components receives a total of 0 weekly downloads. As such, @automatic-labs/ui-components popularity was classified as not popular.
We found that @automatic-labs/ui-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.