
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@coveo/create-atomic-component-project
Advanced tools
This is a starter project for building web components for Coveo Atomic using Stencil.
If you used npm init @coveo/atomic-component or npm init @coveo/atomic-result-component, your component should already be in src/components.
You can use either of these commands at the root of your project to add another component.
Visit Create a custom component for more information
You can test your component locally by adding it to src/pages/index.html.
The code of the component should already be included. You just need to add the component tag to the markup of the page.
There are two strategies we recommend for using custom components.
The first step for both these strategies is to publish to NPM.
You should run npm publish in the directory of the component or use the workspace flag to target it.
If you want your component to stay private, we recommend you publish it either to the official npm registry as a private package or to your own npm registry.
Visit Publish your custom component for publish instructions.
If you do not want your component to be listed on the Atomic Custom Component marketplace, change the keywords field in the package.json of your component before publishing.
<script type='module' src='https://unpkg.com/my-component@0.0.1/dist/my-component.esm.js'></script> in the head of your index.htmlYou cannot use
unpkgif your component is private.
Visit Use a published custom component for more information.
npm install my-component --save<script type='module' src='node_modules/my-component/dist/my-component.esm.js'></script> in the head of your index.htmlFAQs
Initialize a Coveo Atomic Library Project
The npm package @coveo/create-atomic-component-project receives a total of 0 weekly downloads. As such, @coveo/create-atomic-component-project popularity was classified as not popular.
We found that @coveo/create-atomic-component-project demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.