This codebase started as a hack day project by @gtrufitt and @nicl. The purpose is parity of the existing discussion application on Frontend using the discussion API (search for Private Repo).

LICENSE

README.md

build

App.d.ts

App.esm.js

App.js

App.stories.d.ts

App.test.d.ts

components

AbuseReportForm

AbuseReportForm.d.ts

AbuseReportForm.stories.d.ts

AbuseReportForm.test.d.ts

Avatar

Avatar.d.ts

Avatar.stories.d.ts

Badges

Badges.d.ts

Column

Column.d.ts

Comment

Comment.d.ts

Comment.stories.d.ts

CommentContainer

CommentContainer.d.ts

CommentContainer.stories.d.ts

CommentContainer.test.d.ts

CommentForm

CommentForm.d.ts

CommentForm.stories.d.ts

CommentReplyPreview

CommentReplyPreview.d.ts

CommentReplyPreview.stories.d.ts

Dropdown

Dropdown.d.ts

Dropdown.stories.d.ts

Dropdown.test.d.ts

Filters

Filters.d.ts

Filters.stories.d.ts

FirstCommentWelcome

FirstCommentWelcome.d.ts

FirstCommentWelcome.stories.d.ts

LoadingComments

LoadingComments.d.ts

LoadingComments.stories.d.ts

LoadingPicks

LoadingPicks.d.ts

LoadingPicks.stories.d.ts

Pagination

Pagination.d.ts

Pagination.stories.d.ts

Pagination.test.d.ts

PillarButton

PillarButton.d.ts

PillarButton.stories.d.ts

Preview

Preview.d.ts

Preview.stories.d.ts

RecommendationCount

RecommendationCount.d.ts

RecommendationCount.stories.d.ts

Row.d.ts

Timestamp

Timestamp.d.ts

Timestamp.stories.d.ts

TopPick

TopPick.d.ts

TopPick.stories.d.ts

TopPicks

TopPicks.d.ts

TopPicks.stories.d.ts

fixtures

comment.d.ts

discussion.d.ts

discussionWithNoComments.d.ts

discussionWithTwoComments.d.ts

legacyDiscussionWithoutThreading.d.ts

noTopPicks.d.ts

topPicks.d.ts

api.d.ts

dateFormatter.d.ts

identity-component-event.d.ts

identity-component-event.test.d.ts

joinUrl.d.ts

mockFetchCalls.d.ts

palette.d.ts

pillarToEnum.d.ts

pillarToString.d.ts

reducer.d.ts

simulateNewComment.d.ts

useInterval.d.ts

stats.html

test-page.d.ts

tsconfig.tsbuildinfo

types.d.ts

package.json

Supply Chain Attack on Axios Pulls Malicious Dependency from npm

@guardian/discussion-rendering

jamesgorrie

jsherbert

philmcmahon

tomrf1

0x101

ajwl

akash1810

annabeddow

aoifemcl15

dlawes

dskamiotis

frankie_hammond

ghaberis

guardian-developers

itsibitzi

jacobwinch

justinpinner

marjank

mchv

michaelclapham_gnm

mxdvl

nicl

olly.namey.guardian

reetta

rhysmills

rtyley

sam.hession

simonadcock-gu

sndrs

thaliasilver

tjmw

rikroots

david.furey.gu

zekehg

jamieb-gu

arelra

robertkenny_gu

alinaboghiu.g

joecowton1

yusuf.faraji

ab-gnm

novembertang

pete_f

idris-elliott-guardian

georgeblahblah

andyg421

seanclarkeguardian

discussion-rendering

An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

This Chrome extension includes content scripts that execute JavaScript on specified websites.

What are Chrome extension content scripts?

Chrome: Content Script

This Chrome extension requests host permissions to access specific websites or domains.

What are Chrome extension host permissions?

Chrome: Host Permission

This Chrome extension requests permissions to access browser APIs, user data, or system features.

What are Chrome extension permissions?

Chrome: Permission

This Chrome extension requests wildcard host permissions that grant broad access to websites.

What are Chrome extension wildcard host permissions?

Chrome: Wildcard Host Permission

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

@guardian/discussion-rendering - npm Package File explorer