Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@elvia/elvis
Advanced tools
Elvis CSS library offers classes and variables for styling components as well other styling utilities like layout and typography classes.
Read our get started guide at design.elvia.io to get started using our CSS library and components.
Usage example:
<button class="e-btn">Button</button>
Read about the philosophy behind Elvis here.
NOTE! The web project will not work properly before the setup in main project has been done.
packages/elvis/percy/components
.
How Percy works@include helpers.custom-light-theme-tokens {
--e-tag-color-neutral-background: var(--e-light-theme-black);
}
@include helpers.custom-dark-theme-tokens('tag') {
--e-tag-color-neutral-background: var(--e-dark-theme-white);
}
.e-tag {
background: var(--e-tag-color-neutral-background);
}
Figma: Use the Elvia Figma to get sketches of how the component should be styled and work.
Deprecating outdated classes:
deprecated-classes.json
file located at
packages/elvis/.internal/deprecated-classes.json
. Do not include the period prefix in the deprecated
class name. "e-deprecated-class": {
"deprecateChildren": true, // optional
"requiredAncestor": "e-deprecated-class-ancestor", // optional
"version": "2.0.0",
"replacement": { // optional
"name": "e-better-replacement",
"type": "class",
"documentation": "https://design.elvia.io/e-better-replacement"
},
"sunset": "March 2023" // optional
}
Glossary:
deprecateChildren
: If true, all other Elvis classes that include the name specified above will be
deprecated (optional).
requiredAncestor
: If specified, the requiredAncestor class will only cause a warning if the specified
'requiredAncestor' class is present as an ancestor in the DOM (optional).
sunset
: An approximate date of when classes will be removed from Elvis (optional).
Lastly, remember to remove any Percy tests for the deprecated class. They can be found in
packages/elvis/percy
.
packages/elvis
yarn build
to build the classes.yarn start
to start/watch for changes while developingpackages/web
. E.g.
packages/web/src/app/doc-pages/components/button-doc
packages/elvis/src
choose between the components
, utilities
and variables
folders depending on
what you are creating.The classes should be documented in the packages/web
folder so that users of the design system can find
information on how to use them.
packages/web/src/app/doc-pages/components
and find the component you want to add documentation
to or create a new module (like the ones existing already).NOTE! You will need to set up two-factor authentication with NPM to manually publish your changes. Elvia NPM.
Update version: When doing updates to Elvis remember to always update the version in
packages/elvis/package.json
.
Document: the changes / removal or new classes in the CHANGELOG.json
file as well as at the correct
documentation-page. E.g. packages/web/src/app/doc-pages/components/button-doc
. Example of an update in
CHANGELOG.json:
{
"version": "8.3.1",
"date": "April 20, 2022",
"changelog": [
{
"type": "breaking_changes",
"changes": ["Fixed a class not working properly."],
"fixes": [
"Change something to fix something",
"Another step"
],
"components": [{ "displayName": "Table", "url": "https://design.elvia.io/components/table" }],
"pages": []
}
]
},
The type should be "breaking_changes", "bug_fix", "new_feature" or "patch". Changes describes what changes have been done, while fixes describes steps the user has to do to fix their code to be up to date. Components links to all related components, and pages links to all related pages.
Commit & push: to your branch.
Pull request: Create a pull request with all the changes at the Design system Github repo.
Preview: Netlify will generate a preview link when the pull request is created. The link can be used to send a preview of the changes e.g. to designers or other developers. Find the link at the bottom of the checkpoint-list in the pull request.
Merge branch: When the branch has been approved by one other member of the team, merge the changes into master.
Publish to NPM: Whenever something is merged or pushed to master, any packages with a new version in
their package.json
will be automatically published to NPM. If you for some reason need to manually
publish a version (e.g. publishing a beta-version) this can be done by navigating to packages/elvis
and
running the command npm publish --otp=<OTP-code>
.
FAQs
Elvia design system
The npm package @elvia/elvis receives a total of 1,032 weekly downloads. As such, @elvia/elvis popularity was classified as popular.
We found that @elvia/elvis demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.