
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@livekit/livekit-chakra-theme
Advanced tools
A Chakra-UI theme for LiveKit applications and sites
First-time setup:
git clone git@github.com:livekit/livekit-chakra-theme.git
pnpm install
To make changes:
src/
pnpm build
vx.x.x
Upon tagging, CI will publish that version to NPM.
To use your changes, run pnpm update @livekit/livekit-chakra-theme --latest
in the repo that’s using the theme.
To validate your changes locally without publishing the package to npm, you can use yalc.js. This will allow you to use the local, unpublished version of your package in any other local repo. For example, you can see how changes to the theme affect other projects that depend on it before you publish the new theme and update the other repos that depend on it.
yarn watch
to publish and automatically update the package in the local yalc store.npm i yalc -g
or yarn global add yalc
.)@livekit/livekit-chakra-theme
and run yalc link @livekit/livekit-chakra-theme
. The repo should now use the local version of the theme from the Yalc store. You can find more information in the docs.Remove local yalc package version: To return to the state before you ran yalc link ...
, you must remove the link to the local yalc store with yalc remove @livekit/livekit-chakra-theme
.
FAQs
A Chakra-UI theme for LiveKit applications and sites
The npm package @livekit/livekit-chakra-theme receives a total of 744 weekly downloads. As such, @livekit/livekit-chakra-theme popularity was classified as not popular.
We found that @livekit/livekit-chakra-theme demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.