![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
@invisionag/components
Advanced tools
Storybook (components.ivx.design)
npm install --save @invisionag/components
// new since v7.0.0 - import the main css file
import '@invisionag/components/main.css';
// import the component you want to use
import { Button } from '@invisionag/components';
The Timeline component exported from @invisionag/components/experimental-timeline
is experimental and does NOT adhere to SemVer.
Any version of this component can contain breaking changes and should be used with caution.
import { Timeline } from '@invisionag/components/experimental-timeline';
Available icons are located in the SVG
folder in the root directory. After changing icons run
npm run sync-svgs
This will regenerate all icon components from the SVGs in the SVG
folder.
When deleting/renaming icons the file src/components/Icon/index.tsx
needs to be adapted as well.
In the past, we have used styled-components
for styling components within this package. Moving forward, we intend to
use TailwindCSS instead. This will allow us to use the same styling framework across all our projects.
To avoid naming conflicts or version lock-ins between components and projects, we use a c-
prefix
for the TailwindCSS class names. So, instead of font-bold
you'll need to use c-font-bold
. Please refer to
the documentation of TailwindCSS for more information.
Similarly, container query classes are also prefixed with c-
to avoid conflicts with other libraries, so instead
of @container/table
you'll need to use c-@container/table
and @sm/table:c-flex
or similar classes.
main
branch0.3.0
)CHANGELOG.md
npx np@latest --any-branch
and when asked about the version, select the one previously decided on.package.json
, push the changes and release a version on NPM.src
before publishing.ui-components
should be followed up with a change in next-lib
where that new version has to be allowed.
For next-lib
that's a minor change unless the consequences of the change to ui-components
are more massive.FAQs
UI Components for injixo
The npm package @invisionag/components receives a total of 0 weekly downloads. As such, @invisionag/components popularity was classified as not popular.
We found that @invisionag/components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 42 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.