
Security News
Software Engineering Daily Podcast: Feross on AI, Open Source, and Supply Chain Risk
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.
@merify/ui
Advanced tools
@merify/ui Component libraryThis repository contains React UI components as well as some other helpful scripts used throughout the Merify ecosystem.
yarn add @merify/ui
Table of Contents:
Main development scripts:
yarn storybook
yarn type-check
yarn compile
yarn watch
Making changes to @merify/ui can happen in a few different ways, with the
most useful being React Storybooks. Storybooks is
a development IDE that allows one to define various component states in isolation
as well as write docs using MDX.
To start using storybooks, boot it up with
yarn storybook
Once it's done compiling, a browser window will launch containing all of your stories.
To add a new story, create a new file following this filenaming convention:
MyComponent.stories.tsx
or
MyComponent.stories.mdx
Storybooks will automatically pick up this file extension and display the story in the sidebar.
See the numerous examples throughout the repo for examples on how to write stories, or refer to the Storybooks docs.
Another way to develop is by symlinking packages via yarn link, which allows one to make changes in one package that will then picked up by another.
In the main @merify/ui component repo run
yarn link && yarn watch
This creates the symlink and boots the compiler in watch mode.
Then in another terminal window cd into the project your working in and connect the link:
yarn link @merify/ui
yarn dev
At this point changes will be picked up from the component lib and refreshed in the consuming app.
A third option is publishing pre-releases (canaries) to NPM, which one can then yarn add in the consuming repo.
patch/minor/major semver label as well as releaseyarn add @merify/ui@canary to install the latest release.Deploying new versions of the library to NPM is handled automatically via Auto.rc, via a standard pull-request workflow. Changes are tagged with an appropriate semver PR label (major/minor/patch), which is then picked up by Auto and deployed via a Github action.
To create a new release:
release label. Don't forget this step! This tells things to actually publishFAQs
Merify UI library
We found that @merify/ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.