
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@commonapp/common-app-design-system
Advanced tools
Centralized design system for Common App.
The Common App design system (CADS) is a collaborative effort to centrally store and manage shared components across the organization. These components are built and designed framework agnostic, meaning they are made to work in any Javascript-based application we may have now or in the future.
CADS utilizes ionic's Stencil as a framework to create and release these components. The output is usable within our current Angular applications as well as in the dot org site and our Salesforce communities.
Developers should utilize Stencil's own documentation as a primary resource when building and maintaining components. As opportunities to expand this on our end appear, additional information may be available through the CADS Confluence pages.
In the src/
folder is an index.html
file. This HTML file should be used to test actively developed components. Placing the components being worked on in this file works with the www
output target of Stencil to create a localhost environment to work on components.
Changes made to the index.html
file should not be committed to the main branch. We may explore using a .gitignore
line to untrack this file but for the time being, do not stage, commit, or push any changes to this file beyond the templating that already exists.
Once Storybook stories are created, it's also possible to do live development through Storybook itself. The core npm run start
command is setup to enable developers to work on Stencil components and test them within Storybook.
Script | Action |
---|---|
npm run build | Build all components with documentation. |
npm run build:prod | Build all components in full production mode. |
npm run build:serve | Run a hot-reloading Stencil build command. |
npm run build:watch | Run a hot-reloading Stencil build command and open a localhost server for testing. |
npm run start | Concurrently run build:serve and storybook for live component creation and testing within Storybook. |
npm run test:all | Run Jest (unit) and end-to-end (E2E) tests on all components. |
npm run test:e2e | Perform a single E2E test across all components. |
npm run test:e2e:watch | Open a hot-reloading E2E testing instance. |
npm run test:unit | Perform a single Jest unit test run across all components. |
npm run test:unit:watch | Open a hot-reloading Jest unit testing instance. |
npm run generate | Create a new Stencil component. |
Script | Action |
---|---|
npm run tokenize | Generate new token outputs from changes in the source token folders. |
Script | Action |
---|---|
npm run storybook | Start a local Storybook server to test and work on documentation. |
npm run storybook:build | Run the build task for Storybook output. Outputs a static version of Storybook to the ./public folder. |
Script | Action |
---|---|
npm run eslint | Manually run ESLint on the entire project. |
npm run prettier | Manually run Prettier on the entire project. |
npm run stylelint | Manually run Stylelint against all stylesheets in the src/ folder. |
Script | Action |
---|---|
npm run prepublishOnly | Automatically run pre-publish by npm. Runs build:prod |
npm run preversion | Automatically run pre version bump by npm. Runs test:all |
FAQs
Centralized design system for Common App.
We found that @commonapp/common-app-design-system demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.