
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@centrifuge/fabric
Advanced tools
This package contains the implementation of the Centrifuge design system. It is home to:
To start using Fabric, install the package and its peer dependencies:
# yarn
yarn add @centrifuge/fabric react react-dom styled-components
# npm
npm install --save @centrifuge/fabric react react-dom styled-components
Import the GlobalStyle
component, a theme, and styled-components
ThemeProvider
component, and add them to the root of your React app.
import { GlobalStyle } from '@centrifuge/fabric'
import centrifugeLight from '@centrifuge/fabric/dist/theme/centrifugeLight'
import { ThemeProvider } from 'styled-components'
function App() {
return (
<ThemeProvider theme={centrifugeLight}>
<GlobalStyle />
{/* Rest of your React app */}
</ThemeProvider>
)
}
react
and styled-components
is used (at moment of writing: styled-components@5.3.1
)apps/package.json
under the workspaces
propapps/tinlake-ui/declarations.d.ts
apps/tinlake-ui/package.json
:
"@centrifuge/fabric": "workspace:*",
build:deps
script in apps/tinlake-ui/package.json
:
"build:deps": "cd ../tinlake.js && yarn build && cd ../tinlake-ui"
"build:deps:tinlake.js": "cd ../tinlake.js && yarn build && cd ../tinlake-ui",
"build:deps:fabric": "cd ../fabric && yarn build && cd ../tinlake-ui",
"build:deps": "yarn build:deps:tinlake.js && yarn build:deps:fabric"
$ yarn storybook
Will start the Storybook to allow development of the components in isolation
$ yarn build --watch
Will build locally and listen for changes, allowing to see the changes directly when working on tinlake-ui
, for example
This package uses Loki for visual regression testing.
To execute visual regression tests locally:
yarn storybook # starts storybook, needed for Loki locally to be able to operate on stories
yarn test
If the test fails (differences were spotted between the reference
and current
snapshots), the diff images will be
created in .loki/difference
. If all the changes were expected, the reference snapshots can be approved:
yarn approve
Create a new branch and run yarn bump
, which bumps the package version, updates the changelog, creates a commit and tags it. Push the branch/tag, which should publish the version to NPM. Open a PR to merge the changes to main
. For generating the changelog, make sure to use the conventional commits spec in your commits, with fabric
as the scope, e.g.: feat(fabric): Add button component
FAQs
Fabric Component Library
We found that @centrifuge/fabric demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.