Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@bloomreach/hippo-theme
Advanced tools
Hippo theme is a centralised library containing reusable components for Hippo-related projects.
The Hippo theme is a centralised library containing reusable components for Hippo-related projects. You can use it to create clickable mockups or end-projects that need to be in line with the Hippo styling.
Run the commands below in the project root directory.
$ npm ci
The build version is located in the dist
directory.
$ npm run build
The tests need to pass in order to build the demo.
$ npm test
The browser will show the demo website which shows all available components for the theme.
$ npm start
When working on end projects that use Hippo theme, sometimes changes need to be made to Hippo theme
and you want to see the results right away. For this we can use npm link
.
First create a global link to the Hippo theme
$ npm link
On OSX, you may need super-user privileges to create this link. Assuming you have a watch task with livereload enabled running in your end project, you can use the npmlink_watch task to watch the Hippo theme files (running two live-reload watch tasks in parallel is not possible)
$ npm run npmlink_watch
Then in your end project run
$ npm link hippo-theme
When the link is no longer necessary, simply remove it on the project side with
$ npm uninstall hippo-theme
and in your global NPM library with
$ npm unlink
This, too, may require super-user privileges on OSX.
$ npm publish
To add an icon to the theme and use it in the CMS Java code, perform the following steps:
FAQs
Hippo theme is a centralised library containing reusable components for Hippo-related projects.
The npm package @bloomreach/hippo-theme receives a total of 244 weekly downloads. As such, @bloomreach/hippo-theme popularity was classified as not popular.
We found that @bloomreach/hippo-theme demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.