
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@cpelements/cp-comments
Advanced tools
This web component is intended to be used with the red_hat_comments Drupal module.
This component had a rocky development process and is a bit different from working on most components. It's recommended to develop on this with a local Drupal environment, possibly many Drupal development environments.
See CP Elements Docs for general instructions getting setup, there's helpful info about getting your environment setup and other helpful information.
To get a proper dev setup get CP-comments setup in a Drupal environment:
Also see the architecture documentation.
From inside this folder run:
npm run dev
From CP Elements git root run:
# Only watches and compiles CP-Comments and it's dependencies
npm run dev cp-comments
# Or this command that launches a web server and watches/compiles all components:
npm start
The web server is not helpful for CP Elements at time of writing, it only works well in a Drupal context.
| CSS Property Name | Default | Description |
|---|---|---|
--cp-comments__loader__color | #ccc | Color of the loading spinner |
cp-comments:comments-loadedFires when the first/another batch of comments have been loaded
event.detail.commentCount: Total comments (from all pages)event.detail.cpComments: A reference to the cp-comments elementcp-comments:comment-addedFires when a comment has been successfully added. Includes:
event.detail.commentCount: Total comments (from all pages)event.detail.cpComments: A reference to the cp-comments elementcp-comments:comment-deletedFires when a comment is successfully deleted. Includes:
event.detail.commentCount: Total comments (from all pages)event.detail.cpComments: A reference to the cp-comments elementpfeconfig-queryFires when component loads and is ready for config from the host site. See docroot/modules/contrib/red_hat_comments/templates/comments-block.html.twig on the Commenting Platform, which captures the event and sets the config on cp-comments.
At time of writing, we're in the middle of heavy development, and need to coordinate multiple folks working on the code, pushing code to QA, and code review.
The process (for now) is:
epic/cp-comments-1x/integration, it's recommended to use DAT branch naming for consistency:
feature/USERNAME/TICKET--SHORT-DESCRIPTION
For example:
feature/wruvalca/CPCORE-9212--fixing-authentication`
npm run dev cp-comments from CP Elements git root, or npm run dev from the CP Comments folder to watch and build code.main.Check with devs working on cp-comments to see if they're close to needing a release to combine efforts.
epic/cp-comments-1x/integrationepic/cp-comments-1x/integration to GitLabnvm use or similar for CP Elements gitroot)elements/cp-commentsnpm version patch (assuming you want a patch and not )npm run build (this ensures the component will report the right version from it's API)npm publish --access=publicepic/cp-comments-1x/integrationj/public_modules/package.jsonFAQs
Comments web component made for Red Hat Customer Portal
We found that @cpelements/cp-comments demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.