
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign hits npm.
@brightspace-ui/core
Advanced tools
A collection of accessible, free, open-source web components for building Brightspace applications
A collection of accessible, free, open-source web components and tools for building Brightspace applications.
npm install @brightspace-ui/core
:focus-visible pseudo-class polyfillAfter cloning the repo, run npm install to install dependencies.
Run npm run build once, or any time icon or Sass files are changed.
Start an es-dev-server that hosts the demo pages:
npm start
# eslint and lit-analyzer
npm run lint
# eslint only
npm run lint:eslint
# lit-analyzer only
npm run lint:lit
# lint, unit tests and axe tests
npm test
# unit tests
npm run test:headless
# debug or run a subset of local unit tests
# then navigate to `http://localhost:9876/debug.html`
npm run test:headless:watch
This repo uses the @brightspace-ui/visual-diff utility to compare current snapshots against a set of golden snapshots stored in source control.
The golden snapshots in source control must be updated by Github Actions. If your PR's code changes result in visual differences, a PR with the new goldens will be automatically opened for you against your branch.
If you'd like to run the tests locally to help troubleshoot or develop new tests, you can use these commands:
# Install dependencies locally
npm i mocha -g
npm i @brightspace-ui/visual-diff puppeteer --no-save
# run visual-diff tests
mocha './**/*.visual-diff.js' -t 10000
# subset of visual-diff tests:
mocha './**/*.visual-diff.js' -t 10000 -g some-pattern
# update visual-diff goldens
mocha './**/*.visual-diff.js' -t 10000 --golden
TL;DR: Commits prefixed with
fix:andfeat:will trigger patch and minor releases when merged tomaster. Read on for more details...
The sematic-release GitHub Action is called from the release.yml GitHub Action workflow to handle version changes and releasing.
All version changes should obey semantic versioning rules:
The next version number will be determined from the commit messages since the previous release. Our semantic-release configuration uses the Angular convention when analyzing commits:
fix: or perf: will trigger a patch release. Example: fix: validate input before usingfeat: will trigger a minor release. Example: feat: add toggle() methodBREAKING CHANGE: with a space or two newlines in the footer of the commit messagebuild:, ci:, docs:, style:, refactor: and test:. Example: docs: adding README for new componentTo revert a change, add the revert: prefix to the original commit message. This will cause the reverted change to be omitted from the release notes. Example: revert: fix: validate input before using.
When a release is triggered, it will:
package.jsonOccasionally you'll want to backport a feature or bug fix to an older release. semantic-release refers to these as maintenance branches.
Maintenance branch names should be of the form: +([0-9])?(.{+([0-9]),x}).x.
Regular expressions are complicated, but this essentially means branch names should look like:
1.15.x for patch releases on top of the 1.15 release (after version 1.16 exists)2.x for feature releases on top of the 2 release (after version 3 exists)Looking for a new component or an enhancement not listed here? Create a GitHub issue!
FAQs
A collection of accessible, free, open-source web components for building Brightspace applications
The npm package @brightspace-ui/core receives a total of 11,436 weekly downloads. As such, @brightspace-ui/core popularity was classified as popular.
We found that @brightspace-ui/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign hits npm.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.