Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@bigbinary/neeto-commons-frontend
Advanced tools
A package encapsulating common code across neeto projects including initializers, utility functions, common components and hooks and so on.
The commons frontend library for Neeto Applications.
Install from npm:
yarn add "@bigbinary/neeto-commons-frontend@2.0.16"
This package relies on the host project's tailwind configuration. So add neeto-commons-frontend to your project's tailwind.config.js file:
module.exports = {
purge: {
content: [
// ... other content directories
"./node_modules/@bigbinary/neeto-commons-frontend/**/*.js",
],
},
// ... other tailwind config options
};
This package exports four different sets of functions and components. Click on them to read more:
There is only a single breaking change from version 1 to version 2. The pure
functions (which has only ramda as its peerDependency) have been moved to a
separate bundle (named pure). You can import them from
@bigbinary/neeto-commons-frontend/pure
instead of
@bigbinary/neeto-commons-frontend/utils
.
Here is a list of functions that have been moved:
removeById
, findById
, replaceById
, modifyById
, findBy
, removeBy
,
replaceBy
,modifyBy
, existsById
, existsBy
, findLastBy
, findIndexById
,
findIndexBy
,findLastIndexBy
, filterBy
, countBy
, copyKeys
,
renameKeys
, copyKeysDeep
noop
, toLabelAndValue
, getRandomInt
, randomPick
, dynamicArray
,
isNotNil
, isNotEmpty
, notEquals
, isNot
, notEqualsDeep
,
isNotEqualDeep
transformObjectDeep
, keysToCamelCase
, keysToSnakeCase
, deepFreezeObject
,
matches
, filterNonNull
slugify
, humanize
, snakeToCamelCase
, camelToSnakeCase
, capitalize
,
truncate
When you are migrating from version 1 to version 2, do the following:
@bigbinary/neeto-commons-frontend/utils
and
delete the above mentioned functions from those imports.@bigbinary/neeto-commons-frontend/pure
instead.yarn install
to download the dependencies and setup the development
environment.yarn build --watch
to automatically transpile code as you save the
file. You can omit the --watch
flag if you want to run the build only once.yalc publish
to publish the
neeto-commons-frontend to the local yalc store.yalc install
to install the neeto-commons-frontend to the host
application.neeto-commons-frontend
, run yalc push
to push
the changes to the host application.This is how releases are managed in this repo.
1.0.x
)
from main branch.2.X.Y
.yalc
package manager. We won't raise PR until the deployment
and verification is successfully done locally for all neeto-applications. The
usage of yalc is explained in this video:
https://vimeo.com/722958162/9e931b640cyalc push
to install
the latest changes.2.X.Y
branch with the exact same name for the tag (2.X.Y
). The target
branch will be kept as 2.X.Y
. This will create a tag from the latest 2.X.Y
branch and this ensures that the latest commit on that branch will remain
intact even if that branch gets deleted.2.X.Y
to main and delete its source
branch. This will delete all commits except the top one (since we have created
a tag with it).2.X.Y
) and
the cycle will continue.yalc remove neeto-commons-frontend
to remove yalc based
package and run yarn add neeto-commons-frontend@2.X.Y
to fetch the latest
changes from npm in all repos and raise PR. You might be able to slightly
tweak this script to get the job done:
https://gist.github.com/jagannathBhat/42a584748d97fe134f0abadb191ef29aFAQs
A package encapsulating common code across neeto projects including initializers, utility functions, common components and hooks and so on.
We found that @bigbinary/neeto-commons-frontend demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.