Product
Socket Now Supports uv.lock Files
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
@bloom-housing/ui-components
Advanced tools
Shared user interface components for Bloom affordable housing system
This package is the home of the core UI components for the Bloom affordable housing system, meant to be imported from one or more applications that provide the end-user interface.
Bloom components have been design with the principles of Atomic Design in mind, and some of the directory structure and naming conventions are based on that.
There are also Page Components as a distinct class, which represent larger combinations of components (atomic: organisms) that are meant to be directly imported into specific pages in the system (e.g. a home page).
Look in src/locales
for JSON files containing translated keys for UI elements and copy across all monorepo sites.
The UI components package includes Storybook for easy browsing of the component tree, and is the best way to get started understand what's available.
To spin up Storybook locally, run:
yarn start
To run the test suite which is a combination of storyshots and tests via Jest and Enzyme, run:
yarn test
# or
yarn test -u # updates storyshots based on latest code
Vendor Plugins
BEM
Suggested custom methodology: Our recommendation for a naming methodology is a modified version of BEM. It still uses blocks, sections within blocks and modifiers, but with a subclass syntax for modifiers.
BEM
Sub Class Modifiers: Name modifiers and state-based rules with adjectives
Component naming
Use capitals for React component names
Tokenize prop values
warning={true}
prop might turn into an is-warning
className appliedFAQs
Shared user interface components for Bloom affordable housing system
The npm package @bloom-housing/ui-components receives a total of 598 weekly downloads. As such, @bloom-housing/ui-components popularity was classified as not popular.
We found that @bloom-housing/ui-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.