
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@canopytax/styleguide
Advanced tools
The Canopy Styleguide is a css and javascript library. It exposes global css classes and custom elements.
Canopy uses storybook, an open source UI component explorer to articulate its design system.
A Design System is the single source of truth which groups all the elements that will allow the teams to design, realize and develop a product.
The primary components of the design system are
Creating a new story is easy and can be done in any directory. Simply create a file with the extension *.stories.js
If I am looking to create a story that will illustrate a new button, I might add a new file for it like so:
├── button
│ ├── button.component.js
│ ├── button.stories.js
In storybook's new Component Story Format (CSF), stories are defined as ES modules. A default export marks the title and named exports introduce the story functions.
import React from 'react'
import {CprButton} from 'canopy-styleguide'
export default {
title: 'Button',
// including component will automagically fill docs around props
component: CprButton,
}
export const withEmojis = () => <CprButton>😀 😎 👍 💯</CprButton>
export const withText = () => <CprButton>click me</CprBut>
This will give us
See CprEmptyState for an example
See CSF docs and stories in this project for more
A useful recent (Jan 2020) blog post about storybook config
FAQs
Styleguide for Canopy
The npm package @canopytax/styleguide receives a total of 68 weekly downloads. As such, @canopytax/styleguide popularity was classified as not popular.
We found that @canopytax/styleguide demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.