
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@civicactions/cmsds-open-data-components
Advanced tools
Components for the open data catalog frontend using CMS Design System
This repo acts as an upstream common react library for CMS Open Data sites. This library is powered by Parcel.
For local development, we recommend using npm workspaces. Once you have a workspace directory, install this library inside your workspace along any Open Data downstream sites you wish to work on.
In the root folder for this project, run npm run watch
to build local code. Ensure the upstream is using the same version number located in package.json of this repo. Start the upstream site locally as well, and it should load local code from this repo as the dependency. Parcel also provides hot rebuilding while watch
is running.
This project includes Storybook for component development and documentation.
To start Storybook in development mode:
npm run storybook
This will start the Storybook development server, typically on http://localhost:6006
.
To build a static version of Storybook for deployment:
npm run build-storybook
The built Storybook will be output to the storybook-static
directory.
Stories should be placed alongside components using the naming convention:
ComponentName.stories.jsx
or ComponentName.stories.tsx
Stories use the CSF3 (Component Story Format 3) format. See existing stories in the src/components/
directory for examples.
Storybook integration is ongoing for this project. Some components and page templates may not yet have stories, and certain icons or styles from the CMS.gov design system might not display as intended in Storybook.
Before running a build, it is recommended to clear out the old build and cache files to avoid publishing a stale build.
Run rm -rf dist/
to delete the previous build
Run rm -rf .parcel-cache/
to clear out the parcel build caches
Run npm run build
to create a production version of the library before publishing to npm.
Run npm publish
to publish to npm
When creating an alpha release or any other release intended for testing purposes, add a tag to the publish command. This will prevent the testing release from showing up as the latest release in NPM.
After running npm run build
,
Run npm publish --tag <tag name>
example (npm publish --tag "alpha")
Jest tests can be run using:
npm run test
FAQs
Components for the open data catalog frontend using CMS Design System
The npm package @civicactions/cmsds-open-data-components receives a total of 550 weekly downloads. As such, @civicactions/cmsds-open-data-components popularity was classified as not popular.
We found that @civicactions/cmsds-open-data-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.