Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@indoqa/react-starter
Advanced tools
Typescript based React + Redux + Redux-Observable + Formik starter
This project is a ready-to-use setup for Typescript based React/Redux web applications we use at Indoqa. It is based on the Redux todos example and inspired by a lot of good ideas from the este dev stack. The main focus is to create a consistent environment for client side web applications that are consuming business logic using REST services over HTTP.
The codebase was initially developed with ES6/Flowtype and at the end of 2018 migrated to Typescript because of the more mature tooling support.
Learn about the latest improvements
We invent nothing new, this archetype is just a composition of useful libraries, frameworks, tools and plugins. In addition to vanilla React and Redux, we set up the following:
src
├── main
│ ├── index.ts // entry point to the Javascript application
│ ├── app
│ │ ├── App.tsx // Theming, HTML header
│ │ ├── breakpoints.ts // Defintions of breakpoints
│ │ ├── createStore.tsx // Redux store setup with hot reloading support
│ │ ├── fela.ts // Fela renderer configuration
│ │ ├── i18n.ts // Setup of i18next
│ │ ├── rootEpic.ts // collect all epics and combine them into a root epic
│ │ ├── rootReducer.ts // collect all reducers and combine them into a root reducer
│ │ ├── routes.tsx // link components to routes (URL paths)
│ │ ├── selectors.ts // collect all selectors
│ │ ├── store.ts // Redux store setup with hot reloading support
│ │ ├── theme.ts // application theme
│ │ └── types.ts // root Typescript types
│ ├── commons
│ │ ├── components
│ │ │ ├── atoms // basic building blocks (e.g. boxes, links, etc.)
│ │ │ ├── molecules // composition of atoms
│ │ │ ├── organisms // compositions of molecules and atoms
│ │ │ └── templates // compositions of organisms, molecules and atoms
│ │ ├── store // reusable epics, reducers and actions
│ │ └── types // Flow types available for all features
│ ├── [feature1]
│ │ ├── components
│ │ │ ├── [Feature1]Page.tsx // based on a template available via an URL
│ │ │ └── SomeComponent.tsx // feature-specific molecule or organism
│ │ ├── store
│ │ │ ├── [feature1].actions.ts // actions and action types
│ │ │ ├── [feature1].epics.ts // side effects using rxjs observables
│ │ │ ├── [feature1].reducer.ts // Redux reducers
│ │ │ ├── [feature1].selectors.ts // Reselect selectors to access state
│ │ │ ├── [feature1].services.ts // Services used in side-effects (epics)
│ │ │ └── [feature1].types.ts // Typescript types
│ ├── [feature2]
│ └── ...
│── typings // Global type information for typescript
└── test // Jest tests
└── [feature1]
├── actions
├── components
└── reducers
yarn start
Run the app inside the dev node server including hot reloadingyarn test
Run the testsyarn package
Create a minified distributionFAQs
Typescript based React + Redux + Redux-Observable + Formik starter
The npm package @indoqa/react-starter receives a total of 29 weekly downloads. As such, @indoqa/react-starter popularity was classified as not popular.
We found that @indoqa/react-starter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.