Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
@canopytax/styleguide
Advanced tools
The Canopy Styleguide is a css and javascript library. It exposes global css classes and custom elements.
Canopy uses storybook, an open source UI component explorer to articulate its design system.
A Design System is the single source of truth which groups all the elements that will allow the teams to design, realize and develop a product.
The primary components of the design system are
Creating a new story is easy and can be done in any directory. Simply create a file with the extension *.stories.js
If I am looking to create a story that will illustrate a new button, I might add a new file for it like so:
├── button
│ ├── button.component.js
│ ├── button.stories.js
In storybook's new Component Story Format (CSF), stories are defined as ES modules. A default export marks the title and named exports introduce the story functions.
import React from 'react'
import {CprButton} from 'canopy-styleguide'
export default {
title: 'Button',
// including component will automagically fill docs around props
component: CprButton,
}
export const withEmojis = () => <CprButton>😀 😎 👍 💯</CprButton>
export const withText = () => <CprButton>click me</CprBut>
This will give us
See CprEmptyState for an example
See CSF docs and stories in this project for more
A useful recent (Jan 2020) blog post about storybook config
FAQs
Styleguide for Canopy
We found that @canopytax/styleguide demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.