Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@blockchain-com/components
Advanced tools
The library Components is based on React and styled-components. It contains basic components, "atoms", and more complex "molecules" that are used on the Blockchain.com ecosystem.
Just a quick npm i @blockchain-com/components
and you are good to go!
Use <Fas... />
Fas
is the type ("Fab", "Far" and "Fas" are avaible)
Fab
matches the brand iconsetFas
matches the solid iconsetFar
matches the regular iconset...
is the FontAwesome icon name formatted as PascalCase.
The full icon list is available here
Examples:
<FasCheckCircle />
<FarCheckCircle />
<FabFacebook />
Use <Crypto.../>
...
is the icon name formatted as PascalCase.The list of crypto icons is available here
Examples:
<CryptoBtc />
<CryptoXlm />
Use <Bc... />
...
is the icon name formatted as PascalCase.The list of custom icons is available here
Examples:
<BcBlocks />
<BcTransactions />
Both yarn
and npm
are supported.
The commands are given using npm
however you can use the yarn
equivalent and it will Just Work™
If you want to change the library and reflect your changes on your consumer app without having to push to the repo and release, just:
git clone git@github.com:blockchain/components.git
cd path-to/components
npm link
cd path-to/my-app
npm link @blockchain-com/components
:zap: you need to run npm link @blockchain-com/components
everytime you run npm i
or yarn
...
npm i
npm run start
This library follows the Atomic Design principles.
An additional attention has be taken to ensure that all components are available and fully functional accross major web browsers*, as well as responsive on any screen sizes.
Browsers with > 1% usage:
The coding style rules are defined by Prettier and enforced by Eslint
The good practices™
that we follow are defined by the Javascript Standard Style
Following commands are available:
npm run lint:js
npm run lint:css
Testing is done using Jest and Enzyme.
Following commands is available:
npm test
We use Husky to automatically deploy git hooks
On every git commit
and git push
we run the unit tests and the linting tasks.
The commit messages are also validated and must follow the Conventional Commits spec.
FAQs
Blockchain.com components library
We found that @blockchain-com/components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.