Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@mands/mns-fe-pattern-library
Advanced tools
To install the module npm install mns-fe-style-guide
and then require('mns-fe-pattern-library')
in your code where you want to set the sassPath, which is exposed as sassPath
from the module. For example:
var patternLibrary = require('mns-fe-pattern-library');
//in your webpack config
{
loader: 'sass-loader',
options: {
outputStyle: 'expanded',
sourceMap: true,
sourceMapContents: true,
includePaths: [patternLibrary.sassPath]
}
}]
The style guide is purely a SASS library to provide global styling for
These are all located in lib/mns-fe-styles
and as lib is set as a sass path you can @import
parts of this using mns-fe-styles
as the first part of the path. e.g @import 'mns-fe-styles/colors'
. You can also import everything using @import 'mns-fe-styles/all'
. It is important that you only import parts of the style guide styles once in your application other wise you will get duplication in your CSS output.
brew update
brew install node
node -v
*Or alternatively you can follow the official NodeJS installation guide.
Only If you are using a MAC.
cd ~/
curl -o- https://raw.githubusercontent.com/creationix/nvm/v0.32.1/install.sh | bash
nvm install 6.11.2
For first time installation, within the fesk-pattern-library
repository
npm install
The fesk-pattern-library
repository is shrink-wrapped (Find more on Shrinkwrapping here - https://docs.npmjs.com/cli/shrinkwrap). Hence the dependencies would be downloaded from npm-shrinkwrap.json instead of from package.json.
To download the latest version of dependencies, delete the npm-shrinkwrap.json file and then
npm install
npm shrinkwrap --dev
(Find more here - https://github.com/DigitalInnovation/fesk-documentation/blob/master/how_tos/shrinkwrap_npm_dependencies.md)
When this is running locally it will run Liniting checks, unit tests and will automatically reload the application when making live code changes both client and server side.
npm run dev
This is how the application is started after deployment to an environment. This requires the bundled assets.
npm start
If you need to create a bundle locally.
npm run bundle
FESK is equipped with lazyloading of images. Example of lazyloading -
import '../../lib/lazysizes.min';
res.render('productList', {
cssBundle: getAssetsPromise.then(bundles => bundles['productList.css']),
jsBundle: getAssetsPromise.then(bundles => bundles['productList.js']),
commonjsBundle: getAssetsPromise.then(bundles => bundles['common.js']),
lazysizesBundle: getAssetsPromise.then(bundles => bundles['lib/lazysizes.min.js']),
title: 'productList',
});
<div class="product__image">
<noscript>
<img alt="" src="{{{fullImageUrl}}}" itemprop="image"/>
</noscript>
<img class="lazyload" data-srcset="{{{fullImageUrl}}}?wid=135&fmt=pjpeg 135w, {{{fullImageUrl}}}?wid=270&fmt=pjpeg&qlt=45 270w,
{{{fullImageUrl}}}?wid=245&fmt=pjpeg 245w, {{{fullImageUrl}}}?wid=490&fmt=pjpeg&qlt=45 490w,
{{{fullImageUrl}}}?wid=335&fmt=pjpeg&qlt=90 335w, {{{fullImageUrl}}}?wid=670&fmt=pjpeg&qlt=45 670w,
{{{fullImageUrl}}}?wid=218&fmt=pjpeg 218w, {{{fullImageUrl}}}?wid=436&fmt=pjpeg&qlt=50 436w,
{{{fullImageUrl}}}?wid=264&fmt=pjpeg&qlt=80 264w, {{{fullImageUrl}}}?wid=528&fmt=pjpeg&qlt=35 528w"
sizes="auto"
src="{{{fullImageUrl}}}&fmt=pjpeg" alt="" itemprop="image"/>
</div>
npm run lint:js
to lint all JS files in the src/ directory and webpack config files.npm run lint:sass
to check linting issues in all .scss
and .sass
files in src
directory.A config file named .sass-lint.yml
is added at the root folder which contains the list of files included for lint test and rules. This overrides the default config file which is available with same name in node_module.
npm run test:unit
to run all unit test files that end in .test.js
We have extensive Concourse documentation which can be found here!
Before you can deploy your pipeline you will need to update TEAM_NAME in /ci/deploy-ci-dachs.sh
to your concourse team name.
In majority of the cases deployment should be done via Concourse following the steps listed below:
./deployment/deploy-ci.sh target hash
providing two arguments: target - target enviroments (dev or prod), please note: multiple enviroments can be supplied if necessary, hash - hash of the last commit which should be included in the release.Please note: this style of deployment can ONLY be done on master. It is impossible to deploy from a branch using it.
Emergency local deployment is created for the cases where Concourse is unavailable but deployment needs to proceed. To run emergency deploy the following prerequisites must be met.
On Mac:
brew tap cloudfoundry/tap
brew install cf-cli
On Linux:
Use instructions provided in the Cloud Foundry documentation.
chmod a+x path_to_your_downloaded_binary
cf install-plugin path_to_your_downloaded_binary
./deployment/deploy-emergency.sh target hash
where target is the environment you wish to deploy to and hash is the git hash of the commit you wish to deploy
As with deployment from Concourse, this will create a tag on your current branch as a record of deployment.
views
directory.src/server/routes
create a new directory with the handlers and routes you need. Don't forget to load them in src/server/routes/index.js
.src/client
. Add an entry point to the JavaScript file in webpack.config.js
. Require the SCSS file in the javascript file in order for it to be recognised by the build system./src
/client
/examplePage
examplePage.js
examplePage.scss
/server
/routes
/examplePage
handlers.js
handlers.test.js
routes.js
/views
examplePage.hbs
index.js <-- Edit
webpack.config.js <-- Edit
Team Pegasus
FAQs
FESK Pattern Library
The npm package @mands/mns-fe-pattern-library receives a total of 0 weekly downloads. As such, @mands/mns-fe-pattern-library popularity was classified as not popular.
We found that @mands/mns-fe-pattern-library demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.