Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@commercetools-uikit/link-button
Advanced tools
## Description
Link buttons are similar to Flat buttons, however they are constructed as a
<Link>
and they do not have types. They also support an isExternal
prop. When passed,
the Link button is then constructed with a <a>
instead of the default <Link>
tag.
Requires
react-router
.
import LinkButton from '@commercetools-uikit/link-button';
<LinkButton
to={'/foo/bar'}
iconLeft={<AddIcon />}
label="A label text"
isDisabled={false}
/>
<LinkButton
to={'https://kanyetothe.com'}
iconLeft={<SupportIcon />}
label="A label text"
isDisabled={false}
isExternal={true}
/>
Props | Type | Required | Values | Default | Description |
---|---|---|---|---|---|
label | string | ✅ | - | - | Should describe what the button is for |
to | string or { pathname: String, search: String, query: Object } | ✅ | - | - | The URL that the Link should point to |
iconLeft | element | - | - | - | The icon of the button |
isDisabled | boolean | - | - | false | Tells when the button should present a disabled state |
isExternal | boolean | - | - | false | If true, a regular is rendered instead of the default React Router Link |
The component further forwards all remaining props to the underlying component.
Main Functions and use cases are:
FAQs
Link buttons are similar to Flat buttons but work as link elements.
The npm package @commercetools-uikit/link-button receives a total of 2,026 weekly downloads. As such, @commercetools-uikit/link-button popularity was classified as popular.
We found that @commercetools-uikit/link-button demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.