Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@binary-com/smartcharts
Advanced tools
[![npm (scoped)](https://img.shields.io/npm/v/@binary-com/smartcharts.svg)](https://www.npmjs.com/package/@binary-com/smartcharts) [![Build Status](https://travis-ci.org/binary-com/SmartCharts.svg?branch=dev)](https://travis-ci.org/binary-com/SmartCharts)
SmartCharts is both the name of the app (charts.binary.com) and the charting library. You can install the library to your project via:
yarn add @binary-com/smartcharts
Important Note: the license for the library is tied to the binary.com
domain name; it will not work in github pages.
yarn install
to install dependenciesyarn start
to launch webpack dev serveryarn build
to build the libraryyarn build:app
to build the charts.binary.com appyarn analyze
to run webpack-bundle-analyzerNote: eventhough both
yarn build
andyarn build:app
outputssmartcharts.js
andsmartcharts.css
, they are not the same files. One outputs a library and the the other outputs an app.
In the app
folder, we provide a working webpack project that uses the smartcharts library. Simply cd
to that directory and run:
yarn install
yarn start
The sample app should be running in http://localhost:8080.
Refer to library usage inside app/index.jsx
:
import { SmartChart } from '@binary-com/smartcharts';
class App extends React.Component {
render() {
return (
<SmartChart
onSymbolChange={(symbol) => console.log('Symbol has changed to:', symbol)}
requestSubscribe={({ symbol, granularity, ... }, cb) => {}} // Passes the whole req object
requestForget={({ symbol, granularity }, cb) => {}} // cb is exactly the same reference passed to subscribe
// for active_symbols, trading_times, ... (NOT streaming)
requestAPI={({...}) => Promise} // whole request object, shouldn't contain req_id
/>
);
}
};
SmartCharts expects library user to provide requestSubscribe
, requestForget
and requestAPI
. Refer to API for more details.
The job of loading the active symbols or trading times or stream data from cache or retrieving from websocket is therefore NOT the responsibility of SmartCharts but the host application. SmartCharts simply makes the requests and expect a response in return.
Some important notes on your webpack.config.js (refer to app/webpack.config.js
):
index.html
). In the example we use the copy-webpack-plugin
webpack plugin to do this:new CopyWebpackPlugin([
{ from: './node_modules/@binary-com/smartcharts/dist/chartiq.min.js' },
{ from: './node_modules/@binary-com/smartcharts/dist/smartcharts.css' },
])
CIQ
(the ChartIQ library) as a global object:externals: {
CIQ: 'CIQ'
}
Note: Props will take precedence over values set by the library.
Props marked with *
are mandatory:
Props | Description |
---|---|
requestAPI* | SmartCharts will make single API calls by passing the request input directly to this method, and expects a Promise to be returned. |
requestSubscribe* | SmartCharts will make streaming calls via this method. requestSubscribe expects 2 parameters (request, callback) => {} : the request input and a callback in which response will be passed to for each time a response is available. Keep track of this callback as SmartCharts will pass this to you to forget the subscription (via requestForget ). |
requestForget* | When SmartCharts no longer needs a subscription (made via requestSubscribe ), it will call this method (passing in the callback passed from requestSubscribe ) to halt the subscription. |
lang | Sets the language. |
chartControlsWidgets | Render function for chart control widgets. Refer to Customising Components. |
topWidgets | Render function for top widgets. Refer to Customising Components. |
We offer library users full control on deciding which of the top widgets and chart control buttons to be displayed by overriding the render methods themselves. To do this you pass in a function to chartControlsWidgets
or topWidgets
.
For example, we want to remove all the chart control buttons, and for top widgets to just show the comparison list (refer app/index.jsx
):
import { ComparisonList } from '@binary-com/smartcharts';
const renderTopWidgets = () => (
<React.Fragment>
<div>Hi I just replaced the top widgets!</div>
<ComparisonList />
</React.Fragment>
);
const App = () => (
<SmartChart
topWidgets={renderTopWidgets}
chartControlsWidgets={()=>{}}
>
</SmartChart>
);
Here are the following components you can import:
<ChartTitle />
<AssetInformation />
<ComparisonList />
<CrosshairToggle />
<ChartTypes />
<StudyLegend />
<Comparison />
<DrawTools />
<Views />
<Share />
<Timeperiod />
<ChartSize />
<ChartSetting />
To contribute to SmartCharts, fork this project and checkout the dev
branch. When adding features or performing bug fixes, it is recommended you make a separate branch off dev
. Prior to sending pull requests, make sure all unit tests passed:
yarn test
Once your changes have been merged to dev
, it will immediately deployed to charts.binary.com/beta.
There should be a clear distinction between developing for app and developing for library. Library source code is all inside src
folder, whereas app source code is inside app
.
Webpack determines whether to build an app or library depending on whether an environment variable BUILD_MODE
is set to app
. Setting this variable switches the entry point of the project, but on the same webpack.config.js
(the one on the root folder). The webpack.config.js
and index.html
in the app
folder is never actually used in this process; they serve as a guide to how to use the smartcharts library as an npm package. We do it this way to develop the app to have hot reload available when we modify library files.
All strings that need to be translated must be inside t.translate()
:
t.translate('[currency] [amount] payout if the last tick.', {
currency: 'USD',
amount: 43.12
});
t.setLanguage('fr'); // components need to be rerendered for changes to take affect
Each time a new translation string is added to the code, you need to update the messages.pot
via:
yarn translations
Once the new messages.pot
is merged into the dev
branch, it will automatically be updated in CrowdIn. You should expect to see a PR with the title New Crowdin translations
in a few minutes; this PR will update the *.po
files.
yarn build && yarn publish
Note: This is usually not required, since Travis will automatically deploy to charts.binary.com and charts.binary.com/beta when
master
anddev
is updated.
The following commands will build and deploy to charts.binary.com (Make sure you are in the right branch!); you will need push access to this repository for the commands to work:
yarn deploy:beta # charts.binary.com/beta
yarn deploy:production # charts.binary.com
As ChartIQ license is tied to the binary.com
domain name, we provide developers with a binary.sx
to test out the library on their Github Pages.
Assuming you have a binary.sx
subdomain pointed to your github.io
page, you can deploy the SmartCharts app by doing the following:
CNAME
in your project directory with your site name, Ex: developer.binary.sx
yarn build-travis && yarn gh-pages
Now you should be able to see your SmartCharts app on (developer.binary.sx
)
Note:
yarn build-travis
will add hashing insideindex.html
; do not push those changes to git!
FAQs
[![npm (scoped)](https://img.shields.io/npm/v/@binary-com/smartcharts.svg)](https://www.npmjs.com/package/@binary-com/smartcharts) [![Build Status](https://travis-ci.org/binary-com/SmartCharts.svg?branch=dev)](https://travis-ci.org/binary-com/SmartCharts)
The npm package @binary-com/smartcharts receives a total of 41 weekly downloads. As such, @binary-com/smartcharts popularity was classified as not popular.
We found that @binary-com/smartcharts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.