
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@blockchain-com/constellation
Advanced tools
Base component library for React based applications built and used by Blockchain.com.
Install the library yarn add @blockchain/constellation
Import Inter font. see
Import and wrap your entire App with the ThemeProvider component. Example below
import { useEffect } from 'react'
import {
ThemeProvider,
useThemeMode,
useLocalStorage,
ThemeMode
} from '@blockchain/constellation'
function App(): JSX.Element {
const [themeMode] = useLocalStorage<ThemeMode>('themeMode', 'light')
const theme = useThemeMode(themeMode)
return (
<Store>
<ThemeProvider theme={theme}>
<Router>
...
</Router>
</ThemeProvider>
<Store />
)
}
That's it, happy hacking!
If you would like to develop this library while consuming it via another application, follow these steps:
symlinks: false
in the resolve config.From Constellation repo, run yarn workspace @blockchain-com/constellation build
to compile Constellation.
In the app you would like to symlink the repo to, change the dependency install in package.json
"@blockchain-com/constellation": "portal:../constellation/packages/constellation", // relative path may be different!
In consuming app, run yarn install
You can now make changes to Constellation components and use them directly in the consuming app!
NOTE: For now you will have to manually rebuild (rerun step 1) after every change to a Constellation component.
yarn storybook
- Start and open storybook in the browseryarn build
- Builds the packageyarn test
- Run all testsyarn test --watch
- Run jest in watch modeyarn analyze_bundle:open
- Create an bundle report and open in the browseryarn analyze_bundle:json
- Create an bundle report json in ./stats.json
FAQs
Unknown package
The npm package @blockchain-com/constellation receives a total of 78 weekly downloads. As such, @blockchain-com/constellation popularity was classified as not popular.
We found that @blockchain-com/constellation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.