Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@bbc/digital-paper-edit-react-components
Advanced tools
[The Storybook](https://bbc.github.io/digital-paper-edit-storybook/?path=/story/breadcrumb--projects)
---> Work in progress <--
! What is published in the Storybook may be different to what is being actively used in Digital-Paper-Edit-Client, as the components are currently being migrated. !
This repository uses storybook to gather the components of the React front end. You can read about the "why" in this ADR.
See here for the overall project architecture.
git clone git@github.com:bbc/digital-paper-edit-react-components.git
cd digital-paper-edit-react-components
Optional step to setup nvm to use node version 10, otherwise just use node version 10
nvm use || nvm install
in root of project
npm install
npm run start
Server API is listening on http://localhost:6006/
storybook
with the setup as explained in their docs to develop this React.
6.1.0
Node version is set in node version manager .nvmrc
To build the storybook as a static site
npm run build:storybook
This github repository uses github pages to host the storybook and the demo of the component. Make sure to commit and push any changes to MASTER before deploying to github pages.
npm run deploy:ghpages
Alternatively, if you simply want to build the demo locally in the build
folder then just
npm run build:storybook
you can then run this command to serve the static site locally
npm run build:storybook:serve
Test coverage using jest
, to run tests
npm run test
During development you can use
npm run test:watch
See CONTRIBUTING.md guidelines and CODE_OF_CONDUCT.md guidelines.
See LICENCE
Despite using React, the BBC is not promoting any Facebook products or other commercial interest.
FAQs
[The Storybook](https://bbc.github.io/digital-paper-edit-storybook/?path=/story/breadcrumb--projects)
The npm package @bbc/digital-paper-edit-react-components receives a total of 3 weekly downloads. As such, @bbc/digital-paper-edit-react-components popularity was classified as not popular.
We found that @bbc/digital-paper-edit-react-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 487 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.