
Security News
Insecure Agents Podcast: Certified Patches, Supply Chain Security, and AI Agents
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.
@canonical/ds-react-core
Advanced tools
This template provides a minimal setup to get React working in Vite with HMR.
Currently, two official plugins are available:
We use skipLibCheck to skip type checking of declaration files. This is needed for compatibility with storybook dependencies. If this option is not enabled, the following error occurs:
The current file is a CommonJS module whose imports will produce 'require' calls; however, the referenced file is an ECMAScript module and cannot be imported with 'require'. Consider writing a dynamic 'import("storybook/internal/types")' call instead.
Library checking is only disabled for Storybook files. This is due to Storybook dependencies using CommonJS modules alongside ECMAScript modules, which causes issues when TypeScript tries to type-check them together.
Storybook files are excluded from builds in tsconfig.build.json. Library type-checking is enabled for builds.
Bun is being experimentally used as a package manager.
Bun includes a native JS bundler that can transpile Typescript.
We are not currently considering using bun build for production builds for
the following reasons:
Bun's implementation of globstar is non-standard.
It is difficult to build arbitrarily deep filepaths, as Bun expects a globstar
for each level of supported nesting. Most glob implementations treat a globstar
as representing an arbitrary number of non-hidden directories. However, with
Bun, matching .ts files in src/ui/Button requires the glob pattern
**/**/*.ts, which does not match files in other levels of nesting.
Generating dist/ output that has the correct folder structure (i.e.,
dist/ui/Button/) is non-trivial. bun build generates output with folder
structure starting from matching the shallowest source file. However, this is
not always desired. For example, if ui/ is inside src/, one must cd into
src before running bun build to generate the appropriate folder structure.
You must then set build output to ../dist to place build results in the
project root. This makes the build script unnecessarily complex.
bun build does not generate types, so it must be accompanied by the usage of
some other tool that generates type declarations.
Bun builds slightly faster than the Typescript compiler.
| Tool | Command | Real Time | User Time | Sys Time |
|---|---|---|---|---|
| Bun | bun run build:package:bun | 0m0.648s | 0m1.498s | 0m0.117s |
| Typescript | bun run build:package:tsc && bun run build:package:copycss | 0m0.707s | 0m1.615s | 0m0.094s |
Note that the bun build must also call tsc to generate type declarations, and
the tsc build must call the external copyfiles dependency to copy assets into
dist/.
bun build copies non-TS assets (such as images, stylesheets, etc) into dist.
tsc must be followed up with a manual step that copies non-TS files (currently,
this is only CSS) into dist.
FAQs
Unknown package
We found that @canonical/ds-react-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.

Security News
The planned feature introduces a review step before releases go live, following the Shai-Hulud attacks and a rocky migration off classic tokens that disrupted maintainer workflows.