Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@dcos/ui-kit
Advanced tools
UI Kit is a collaboration between D2iQ's product design team and engineering team. UI Kit provides tools for engineers to build applications that follow the standards and guidelines of the D2DS Design System.
Install dependencies (Node v16+, NPM 7+)
npm i
Start the Storybook server locally then visit http://localhost:6006/
npm start
ESLint is used for linting within the project. We suggest installing the ESLint extension in your preferred code editor.
For more detailed information, see CONTRIBUTING.md.
To generate a new component run the command:
npm run create:component <ComponentName>
npm test
Use test:watch
if you want the tests to run automatically when a file changes:
npm run test:watch
Pass parameters to the test engine (in this case jest) to run a single spec, for example, badge
:
npm run test -- --watch badge
Important guidelines to follow for testing:
For more on this topic, and examples we recommend Better Specs.
import React from "react";
import { render } from "@testing-library/react";
import { BadgeButton } from "../";
describe('Badge', () => {
it("match default badge button component", () => {
const { asFragment } = render(
<BadgeButton onClick={fn} appearance="success">
success
</BadgeButton>
);
expect(asFragment()).toMatchSnapshot();
});
});
The function asFragment
is preferred over create
from react-test-renderer
as it seems to give more robust components and less failures.
baseElement
can also be useful for testing if you are dealing with testing something that renders out side of the container, such as a component that uses a portal like a DropdownMenu or Modal.
To make it easier to select DOM nodes of our components in integration tests, DOM nodes have a data-cy
attribute.
data-cy
ValuesParent nodes: The value of data-cy
for component's parent node is the same as the component name, and should be camelCased. For example: The parent node for <PrimaryButton>
will have data-cy="primaryButton"
.
Child nodes: If a child node has a data-cy
added, there will be a dash between the parent node's name and a string to describe the child node. For example: The footer element of a <DialogModal>
will have data-cy="fullscreenModal-footer"
States and variants: If a node has a special "state", data-cy
will prepend a string describing that state after a dot.
For example:
<TextInput disabled>
will have data-cy="textInput textInput.disabled"
<TextInput>
with an error will have data-cy="textInput textInput.error"
For more information on writing selectors, see the Cypress guide.
We follow Conventional Commit formatting rules, as they provide a framework to write explicit messages that are easy to comprehend when looking through the project history and enable automatic change log generation.
These Guidelines got written based on AngularJS Git Commit Message Conventions.
<type>[optional scope]: <description>
[optional body]
[optional footer]
After your PR is merged into main
, semantic-release
will automatically cut a release if one of your commits is of type feat
, fix
, or perf
.
The first step for downstream pre-release testing requires updating the dist
directory with the changes.
From ui-kit, run:
npm run dist
Use npm-link to create a symlink.
Run the following in the host project:
npm link @dcos/ui-kit
After running the command above, restart the host application.
Note: Do not run npm install
again or you will override changes.
FAQs
D2iQ UI Kit
The npm package @dcos/ui-kit receives a total of 543 weekly downloads. As such, @dcos/ui-kit popularity was classified as not popular.
We found that @dcos/ui-kit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.