Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@financial-times/g-components
Advanced tools
FT.com Page furniture used in interactive journalism projects, wrapped in React
g-components
Reusable React components for building IG pages.
There are two ways you can consume g-components:
import { Accordion } from "@financial-times/g-components";
import from "@financial-times/g-components/styles.css";
This is the new way. It's easier and about as performant as the old way.
import Accordion from "@financial-times/g-components/accordion";
import from "@financial-times/g-components/styles.css";
If you're having performance issues, please try the old way of importing individual components.
g-components v9 is lighter than previous versions and has a few significant API differences:
import from "@financial-times/g-components/styles.css";
Please stay on v8 if you use any of these components.
You can see what components are available in Storybook:
$ npm run storybook
To test components during development:
$ npm link ../g-components
First make sure your local is up to date with the origin and that you're on the main
branch:
$ git pull
$ git checkout main
Next, run npm version [major|minor|patch]
to increment the version based on the type of changes in this release. We use Semantic Versioning to increment versions:
major
releaseminor
patch
npm version vX.X.X
to set the version yourself.Finally, run git push --follow-tags
to push the new version to GitHub, which will trigger the CircleCI pipeline that publishes the new version on NPM.
If you'd like to release a pre-release version (e.g. to test or gradually roll out a new feature), you can create a new version like npm version v1.0.0-canary.0
. The version number should represent the ultimate release this change will land in, while the final 0
can be incremented to make subsequent prerelease builds.
NPM can also generate this automatically for you, with npm version pre[major|minor|patch] --preid canary
.
This software is published by the Financial Times under the MIT licence.
Please note the MIT licence only covers the software, and does not cover any FT content or branding incorporated into the software or made available using the software. FT content is copyright © The Financial Times Limited, and FT and 'Financial Times' are trademarks of The Financial Times Limited, all rights reserved. For more information about republishing FT content, please contact our republishing department.
FAQs
FT.com Page furniture used in interactive journalism projects, wrapped in React
We found that @financial-times/g-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.