
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@box/metadata-taxonomy-picker
Advanced tools
<!-- START doctoc generated TOC please keep comment here to allow auto update --> <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
This library was generated with @box/automation. General overview on how to perform tasks on the generated library can be found in run-tasks Nx documentation.
Your terminal should stay in location of root directory of repository, which is frontend-mono. That Allows Nx to run action against your project, or multiple project if that is necessary.
Do not navigate to packages/group-shared-features/metadata-taxonomy-picker to run commands.
Commands for the project are run using syntax used by Nx:
Syntax: yarn nx <target name> <project name> <option overrides>
| | |
Example: yarn nx test products --watch
All commands used with Nx can be found in project.json file within your package.
nx storybook metadata-taxonomy-picker - launches development environment for UI component.nx build-storybook metadata-taxonomy-picker - build static version of storybook with all stories.nx build metadata-taxonomy-picker - build package using shared-feature-builder executor from automation package.nx build metadata-taxonomy-picker --watch - build package with --watch flag enabled, which rebuilds dist content based on changes in src.nx lint metadata-taxonomy-picker - runs linter over package files.nx test metadata-taxonomy-picker - runs storybook tests (visual/interactions) and jest unit tests, producing coverage report at the end.nx test-storybook metadata-taxonomy-picker - runs storybook tests. You need first to start storybook in separate terminal for this to work.nx test-storybook-local-coverage metadata-taxonomy-picker - runs storybook tests, and produces coverage report at the end. Requires running instance of storybook.nx test-storybook-ci metadata-taxonomy-picker - build storybook and run storybook tests with coverage output. Designed for CI usage.nx test-jest metadata-taxonomy-picker - runs jest unit tests, producing code coverage at the end.nx sonar metadata-taxonomy-picker - performs static analysis of code using SonarQube tooling, to detect bugs and code smells. Integrated as one of the steps in CI process.nx chromatic metadata-taxonomy-picker - uploads storybook build for review to box chromatic , and performs visual comparison of the UI changes against baseline.nx prepare metadata-taxonomy-picker - command run during the package publication process orchestrated by Nx Release.Code of the feature belongs to role_metadata. Responsibilities of owning team include control over code quality, providing guidelines for changes, and alignment with other teams regarding changes. It would be a good practice to consult which team, owning or requesting, will be responsible for implementing changes to code.
Per-locale i18n/*.js files are generated and committed by the Moji Jenkins pipeline. The shared-feature builder copies them into dist/i18n/ during build. Consuming applications list this package in i18n.config.js under translationDependencies.
FAQs
<!-- START doctoc generated TOC please keep comment here to allow auto update --> <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
The npm package @box/metadata-taxonomy-picker receives a total of 771 weekly downloads. As such, @box/metadata-taxonomy-picker popularity was classified as not popular.
We found that @box/metadata-taxonomy-picker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.