Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@matthieuh/faency
Advanced tools
This is the React component library and design system for Traefik Labs.
Built with React, Typescript, Stitches and Radix UI Primitives.
You can find the Storybook with an example for every component in this library here.
npm install @traefiklabs/faency@next
Then you need to wire up the FaencyProvider which will hold the context with the Theme configuration and everything global that the components will need to work well.
The provider accepts one parameter besides the
children
, which is theprimaryColor
, that will be used to build the colors used on the Theme. This color can be one of the colors exported by theStitches
config, just by adding$
as a prefix, or can be any string that represents a CSS color.
import { FaencyProvider } from '@traefiklabs/faency';
const App = () => <FaencyProvider primaryColor="$blue8">{/* your app */}</FaencyProvider>;
Then you are ready to import components and use them on your project:
import { Flex, styled } from '@traefiklabs/faency';
const Container = styled(Flex, {
padding: '$3',
bg: '$black', // alias for backgroundColor
mx: '$2', // alias for margin left and right
});
const MyComponent = () => <Container>{children}</Container>;
docker run -it -v $(pwd):/usr/local/src/ -w /usr/local/src/ -p 3000:3000 node:latest bash
npm install
npm run storybook
At this point, Storybook should automatically open up in your browser and you can start coding, it has hot reload so it will automatically re-render whenever a change is detected on the code.
We use Stories to demonstrate how components can behave and which variants they can take, so it's expected that every component has a Story. Check out how to create stories in the Storybook Docs.
Pull requests are always welcome, but if you have a big change that you would like to work on, it's recommended to open an issue, so we can discuss it beforehand.
A good PR is small, focuses on a single feature or improvement, and clearly communicates the problem it solves.
Try not to include more than one issue in a single PR. It's much easier for us to review multiple small pull requests than one that is large and unwieldy.
As a model for a PR structure we recommend following this order:
fix
or feat
(for features/enhancements) on the PR titlebefore
and after
will be very appreciated).FAQs
Traefik Labs design system
We found that @matthieuh/faency demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.