Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@ironsource/shared-ui
Advanced tools
Shared UI - VUE3 components library
npm i @ironsource/shared-ui
Then import the component in your Vue app:
import Button from '@ironsource/shared-ui/button';
To release a pre-release version, follow these steps:
release/x.x.x
branchrelease/x.x.x
branchrelease/x.x.x
branchPushing to release/x.x.x
branch will trigger pre-release.yml
workflow and will create a pre-release version.
To release a new version of the package (due to breaking changes), you need to follow the next steps:
main
branch with the name release/x.x.x
(x.x.x - version of the package)release/x.x.x
branch with the name feature/feature-name
(feature-name - name of the feature)feature/feature-name
branch to release/x.x.x
branchrelease/x.x.x
branchrelease/x.x.x
branch to main
branchmain
branchMerging release/x.x.x branch to main branch will trigger release.yml
workflow and will create a new(not RC) version of the package.
Uses Vitest + Vue Test Utils (runs automatically on commit)
npm run test
run in watch mode:
npm run test:watch
run tests with coverage:
npm run test:coverage
Generate a new component (using Hygen):
npm run generate:component componentName
Start storybook:
npm run storybook
When developing locally, you can link to the shared-ui library:
npm run build
cd ./dist
npm link
cd <your-project's-path>
npm link @ironsource/shared-ui
Add an alias for the vue & @vueuse/core dependencies import in your vite/webpack config:
vue: path.resolve('./node_modules/vue/dist/vue.runtime.esm-browser.js'),
'@vueuse/core': path.resolve('./node_modules/@vueuse/core/index'),
You may also want to add the following alias for absoulte imports:
'@': fileURLToPath(new URL('./src', import.meta.url)),
Uses ESLint + Prettier rules (runs automatically on commit)
npm run lint
Uses jest, puppeteer and jest-image-snapshot packages
On CI process:
FAQs
Shared UI - VUE3 components library
The npm package @ironsource/shared-ui receives a total of 1,062 weekly downloads. As such, @ironsource/shared-ui popularity was classified as popular.
We found that @ironsource/shared-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.