
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@civicactions/cmsds-open-data-components
Advanced tools
Components for the open data catalog frontend using CMS Design System
This repo acts as an upstream common react library for CMS Open Data sites. This library is powered by Parcel.
For local development, we recommend using npm workspaces. Once you have a workspace directory, install this library inside your workspace along any Open Data downstream sites you wish to work on.
In the root folder for this project, run npm run watch
to build local code. Ensure the upstream is using the same version number located in package.json of this repo. Start the upstream site locally as well, and it should load local code from this repo as the dependency. Parcel also provides hot rebuilding while watch
is running.
Before running a build, it is recommended to clear out the old build and cache files to avoid publishing a stale build.
Run rm -rf dist/
to delete the previous build
Run rm -rf .parcel-cache/
to clear out the parcel build caches
Run npm run build
to create a production version of the library before publishing to npm.
Run npm publish
to publish to npm
When creating an alpha release or any other release intended for testing purposes, add a tag to the publish command. This will prevent the testing release from showing up as the latest release in NPM.
After running npm run build
,
Run npm publish --tag <tag name>
example (npm publish --tag "alpha")
Jest tests can be run using:
npm run test
FAQs
Components for the open data catalog frontend using CMS Design System
The npm package @civicactions/cmsds-open-data-components receives a total of 524 weekly downloads. As such, @civicactions/cmsds-open-data-components popularity was classified as not popular.
We found that @civicactions/cmsds-open-data-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.