Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
@dfds-platform/business-components
Advanced tools
Install with npm:
npm install --save @dfds-platform/business-components
Install with yarn:
yarn add @dfds-platform/business-components
For development you need to create a .env
file with they following keys.
key |
---|
AUTH_ISSUER |
AUTH_CLIENT_ID |
CONTENTFUL_SPACE_ID |
CONTENTFUL_TOKEN |
CONTENTFUL_ENVIRONMENT |
Look in .env.development
for default values.
New releases are created in github which will create a new tag.
ADO will pick up on the new tag and publish a version with the that tag using the ci:publish
npm script
yarn link
It can be handy to use developing functionality in the context of an existing app. yarn link
can be used in that case.
A common problem when using yarn link
is that you end of with multiple versions of packages (eg. react). This is
because dependencies are resolved upwards from within the symlinked react-components
folder.
If you are using webpack
you can try setting resolve.symlinks
to false
in your webpack.config.js
to only resolve
dependencies from the apps node_modules
folder.
Gatsby uses webpack under the hood, so in order to set resolve.symlinks
add the following to the gatsby-node.js
file
exports.onCreateWebpackConfig = ({ getConfig, actions, stage }) => {
const config = getConfig()
config.resolve.symlinks = false
actions.replaceWebpackConfig(config)
}
FAQs
Shared react components within DFDS
The npm package @dfds-platform/business-components receives a total of 206 weekly downloads. As such, @dfds-platform/business-components popularity was classified as not popular.
We found that @dfds-platform/business-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.