
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@financial-times/pro-onboarding-tour
Advanced tools
A user tour highlighting various FT Professional features across FT products
A user tour highlighting various FT Professional features across FT products
npm install @financial-times/pro-onboarding-tour
import('@financial-times/pro-onboarding-tour').then(({ init }) => {
init({ isDebugModeEnabled: false });
});
├─ src/ # Source code
│ ├─ index.ts # Package public entry
│ ├─ definitions/ # global TypeScript type definitions
│ ├─ stories/ # Storybook stories (interaction examples)
│ ├─ vendor/ # Third-party code
│ └─ lib/ # Library code
│ ├─ init.ts # Professional tour initialiser
│ ├─ components/ # UI web components (Overlay, TourStep, etc.)
│ ├─ services/ # Tour logic (navigation, state, loading)
│ └─ utils/ # Small pure helpers (animation, debounce)
| |- src/test/ # Unit tests
├─ screenshots/ # Screenshots for the README
└─ .storybook/ # Storybook configuration
git clone git@github.com:Financial-Times/pro-onboarding-tour.git
cd pro-onboarding-tour
npm install
npm run build # Build the library
npm run build:watch # Watches the files and rebuilds
npm run storybook # Run Storybook for development
npm run test # Run tests
npm run lint # Lint code
npm run format # Format code
There are two type of tests - unit tests and Storybook interaction tests
Storybook interaction tests are written as Storybook stories that include play() functions and use storybook/test helpers and shadow-dom-testing-library to interact with the rendered component inside Storybook's iframe. A representative example is src/stories/TourContainer.stories.ts which contains end-to-end style checks implemented as steps inside play().
Under the hood these interaction tests run with Vitest via Storybook's Vitest addon (see @storybook/addon-vitest and @vitest/browser). More info:
https://storybook.js.org/docs/writing-tests/integrations/vitest-addon https://storybook.js.org/docs/writing-tests/interaction-testing
Where they live
play() tests: src/stories/*.stories.tsRunning Storybook interaction tests locally
You can run the tests in two main ways:
# Start Storybook dev server
npm run storybook
# Run the Storybook test project
npm run test:storybook
# Build Storybook to `storybook-static`
npm run storybook:build
# Run the Storybook test project (it will pick up the static build where configured)
npm run test:storybook
How CI runs them
The CircleCI configuration builds Storybook (npm run storybook:build) and then runs the Storybook UI tests in a Playwright-enabled executor. See .circleci/config.yml jobs build-storybook and test-ui which run npm run storybook:build and npm run test:storybook respectively.
This repository keeps its unit tests under src/test/. Unit tests run with Vitest using the jsdom environment.
Current unit tests (under src/test/) include:
src/test/NavigationService.test.tssrc/test/Overlay.test.tssrc/test/QueryParameterService.test.tssrc/test/StepsLoader.test.tssrc/test/TourContainer.test.tssrc/test/TourStateManager.test.tssrc/test/TourStep.test.tsRunning unit tests
npm run test
npm run test:unit
npm run test:unit -- -t "Overlay"
npm link to create a global linknpm link @financial-times/pro-onboarding-tournpm run build:watch to watch the changes during developmentFAQs
A user tour highlighting various FT Professional features across FT products
The npm package @financial-times/pro-onboarding-tour receives a total of 94 weekly downloads. As such, @financial-times/pro-onboarding-tour popularity was classified as not popular.
We found that @financial-times/pro-onboarding-tour demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Research
/Security News
Malicious Rust crate evm-units disguised as an EVM version helper downloads and silently executes OS-specific payloads likely aimed at crypto theft.