
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@leaflink/stash
Advanced tools
A repository housing all of Leaflink's UI, for faster and easier development. Includes core Vue components + css theme files
Interactive building blocks for creating user interfaces.
Stash is a collection of primitive, product-agnostic elements that help encapsulate LeafLink's look and feel at base level. This project is intended to be used across our digital product portfolio.
There are several ways to configure the framework to suit your specific needs. Configurable items include:
The generated entry file will load all components by default. However, you may configure the framework with a few options:
const options = {
components: ... // provide components "Ă la carte"
directives: ... // provide directives "Ă la carte"
i18n: { // i18n options
locale: ...
t: ...
}
theme: ... // theming options
storage: ... // override localstorage persistence options
}
A sample configuration might look something like:
// plugins/stash/index.js
import Vue from 'vue';
import stash, { LLButton, LLCheckbox } from '@leaflink/stash';
import i18n, { locale } from 'path/to/i18n';
import theme from 'path/to/themes/dark.json';
Vue.use(stash, {
theme,
i18n: {
locale,
t: (key, value) => i18n.t(key, value)
},
components: {
LLButton,
LLCheckbox,
},
});
export default stash;
This example will load the core i18n options, a dark theme, and the LLButton and LLCheckbox components.
Then, in your app's setup, simply:
import stash from '@/plugins/stash';
// ...
Vue.use(stash);
Finally, import the /styles/main.scss file into an scss base file to provides styles and style utils.
Vue.use(...).framework.js: is the framework install function (and any other framework-specific things). It registers components, themes, etc. with your Vue app.index.js is used as the main entry point to the framework. It also exports each component individually, for an Ă la carte build. You may pull in the default export directly and Vue.use it (to quickly get up and running w/ all components and features); or, you may wish configure it with particular options, components, or features.Testing the framework uses @vue-test-utils under the hood. We use Jest (via @vue/cli-plugin-unit-jest) to run our unit-tests.
npm testFAQs
LeafLink's design system.
The npm package @leaflink/stash receives a total of 553 weekly downloads. As such, @leaflink/stash popularity was classified as not popular.
We found that @leaflink/stash demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Research
/Security News
Malicious Rust crate evm-units disguised as an EVM version helper downloads and silently executes OS-specific payloads likely aimed at crypto theft.