Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
@invisionapp/dsm-storybook
Advanced tools
Provisioned by RUDI
Webpack:
in webpack.config.js
we are using:
libraryTarget: 'umd',
umdNamedDefine: true
so our library output will be with umd syntax.
umdNameDefine: true
will name the amd module of the umd build with the library name.
https://webpack.js.org/configuration/output/
https://webpack.js.org/guides/author-libraries/#expose-the-library
https://tomasalabes.me/blog/web-development/2016/04/30/Webpack-Series-Part-1.html
differences between amd, commonjs and amd: https://www.davidbcalhoun.com/2014/what-is-amd-commonjs-and-umd/
Babel:
in .babelrc
we are using:
{
...
"plugins": ["add-module-exports"],
...
}
that removes the need to use ".default" to get export default
functions.
https://www.npmjs.com/package/babel-plugin-add-module-exports
we should consider if we need to use modules: false
in babel. right now it is default (auto
)
FAQs
- [Configuring the Storybook DSM Integration](https://support.invisionapp.com/hc/en-us/articles/360028510211) - [Reference implementation using @invisionapp/dsm-storybook](https://github.com/InVisionApp/dsm-storybook-example-library)
The npm package @invisionapp/dsm-storybook receives a total of 334 weekly downloads. As such, @invisionapp/dsm-storybook popularity was classified as not popular.
We found that @invisionapp/dsm-storybook demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.