
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
@commonapp/common-app-design-system
Advanced tools
Centralized design system for Common App.
The Common App design system (CADS) is a collaborative effort to centrally store and manage shared components across the organization. These components are built and designed framework agnostic, meaning they are made to work in any Javascript-based application we may have now or in the future.
CADS utilizes ionic's Stencil as a framework to create and release these components. The output is usable within our current Angular applications as well as in the dot org site and our Salesforce communities.
Developers should utilize Stencil's own documentation as a primary resource when building and maintaining components. As opportunities to expand this on our end appear, additional information may be available through the CADS Confluence pages.
In the src/
folder is an index.html
file. This HTML file should be used to test actively developed components. Placing the components being worked on in this file works with the www
output target of Stencil to create a localhost environment to work on components.
Changes made to the index.html
file should not be committed to the main branch. We may explore using a .gitignore
line to untrack this file but for the time being, do not stage, commit, or push any changes to this file beyond the templating that already exists.
Once Storybook stories are created, it's also possible to do live development through Storybook itself. The core npm run start
command is setup to enable developers to work on Stencil components and test them within Storybook.
Script | Action |
---|---|
npm run build | Build all components with documentation. |
npm run build:prod | Build all components in full production mode. |
npm run build:serve | Run a hot-reloading Stencil build command. |
npm run build:watch | Run a hot-reloading Stencil build command and open a localhost server for testing. |
npm run start | Concurrently run build:serve and storybook for live component creation and testing within Storybook. |
npm run test:all | Run Jest (unit) and end-to-end (E2E) tests on all components. |
npm run test:e2e | Perform a single E2E test across all components. |
npm run test:e2e:watch | Open a hot-reloading E2E testing instance. |
npm run test:unit | Perform a single Jest unit test run across all components. |
npm run test:unit:watch | Open a hot-reloading Jest unit testing instance. |
npm run generate | Create a new Stencil component. |
Script | Action |
---|---|
npm run tokenize | Generate new token outputs from changes in the source token folders. |
Script | Action |
---|---|
npm run storybook | Start a local Storybook server to test and work on documentation. |
npm run storybook:build | Run the build task for Storybook output. Outputs a static version of Storybook to the ./public folder. |
Script | Action |
---|---|
npm run eslint | Manually run ESLint on the entire project. |
npm run prettier | Manually run Prettier on the entire project. |
npm run stylelint | Manually run Stylelint against all stylesheets in the src/ folder. |
Script | Action |
---|---|
npm run prepublishOnly | Automatically run pre-publish by npm. Runs build:prod |
npm run preversion | Automatically run pre version bump by npm. Runs test:all |
FAQs
Centralized design system for Common App.
We found that @commonapp/common-app-design-system demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.