
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@deskpro/apps-components-style
Advanced tools
CSS Styling for Deskpro Apps.
View Documentation and Examples
Goals:
Non-goals:
Summary:
npm install
npm run dev
http://localhost:3000/apps-style/
in your browsersrc/
and docs in docs/
. As you edit files, the docs site above will live reload.node
and npm
installed on your computernpm install
to initialize dependenciesTo start with, run npm run dev
to start the built-in dev server. This should open your browser at http://localhost:3000/apps-style/
with the documentation site.
As you modify CSS files in src/
and markdown documentation files in docs/
, your browser will live relaod. This makes for a really fast and smooth dev experience.
Here's an example. Say you're working on buttons:
src/components/buttons.css
and docs/components/buttons.md
http://localhost:3000/apps-style/docs/components/buttons.html
buttons.css
, update buttons.md
documentation and examples. Your browser will live-reload as you go.CSS is being post-processed with PostCSS with the postcss-preset-env which enables a bunch of proposed CSS features like variables. We use Stage 0 features.
The general idea is to stay as close to "normal CSS" as we can. i.e. we want to avoid using programming logic like loops, which is why we have avoided SASS or LESS. PostCSS offers just enough convenience (e.g. nested selectors) without going overboard.
This project is linted with stylelint and a SUIT linter plugin. Refer to the documentation if you run into issues or need to tweak the config in some way.
dp-
namespace on all components.
.dp-Button.Button--warning
.docs/
that describe and demonstrate the component and any of its modifiers.The documentation pages in docs/
serve as your "development playground" while you make changes to CSS, but by the time you finish a component, it should also serve as real documentation too.
Documentation is written in Markdown. There are two special bit of fenced HTML:
html @preview
will render the HTML code to the browser screen and show a "toggle code" button that you can click to show the source code. This is what your examples should be written in.html @render
is similar, except there is no button to show the source code. So this is an escape-hatch for (rare) cases you need to render arbitrary HTML.Most of your documentation will be written with examples in html @preview
fenced blocks. For example:
```html @preview
<button class="dp-Button">Default</button>
<button class="dp-Button Button--primary">Primary</button>
<button class="dp-Button Button--warning">Warning</button>
```
This results in three buttons being rendered to the page with "toggle code" button that will reveal that exact source code. So this is perfect for documentation to show off how to use code.
When you start a new component you'll need to create a new docs file for it:
docs/components/my-component.md
. Here's an example: ---
title: My Component
---
# My Component
This is my great component.
```html @preview
<div class="dp-MyComponent">
Here's an example!
</div>
```
This new file maps directly to the URL http://localhost:3000/apps-style/docs/components/my-component.html
website/sidebars.json
and add it.FAQs
Styling for for Deskpro Apps
We found that @deskpro/apps-components-style demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.