Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@nanonpm/photon
Advanced tools
🚀 Nano / Photon Theme-able component library <img alt="Join the community on GitHub Discussions" src="https://img.shie
npm install
npm run serve
npm run build:lib
npm run test:unit
npm run lint
npm login
Update the package version in the package.json
file under the version
field. We are using semantic versioning.
Update the changelog file with the changes you have made.
Run the deploy command - this will run 2 commands synchronously: i) npm run build:lib (builds the project) ii) npm publish (published to npm)
npm run deploy
npm run new
This will run a script prompting you for:
It will then create a Vue component, a .stories.js file, an indes.ts (for export) and a types.ts file. These files will be populated with the basic content to allow for quick and easy scaffolding of new components. Upon running this command you should see the new component hotreloaded into Storybook.
When adding new SVG icons, you can use either of the following methods:
<svg>...</svg>
as the top level node. Remove andy <xml ...>
nodenpm run ico
Photon v2 components are a new system of styling photon components.
You can start the local build by running npm run sb
and then navigating to the Photon v2
section of the storybook.
If you want to run it with external theme files you can run npm run sb:external
and then navigate to the Photon v2
section of the storybook.
In order to get the external theme files to load you need to add the the absolute path to your branding folder for onboarding
into the .env
file.
Make sure it does not have a trailing slash /
at the end.
When you next start the storybook application it will load and pick the theme files from your theme folders.
To learn more about the photon v2 system check the documentation bellow creating photon v2 components
This project uses semantic versioning and semantic release to automatically publish new versions to npm.
When you merge a PR into main
, semantic-release will automatically publish a new version to npm.
FAQs
🚀 Nano / Photon Theme-able component library <img alt="Join the community on GitHub Discussions" src="https://img.shie
The npm package @nanonpm/photon receives a total of 15 weekly downloads. As such, @nanonpm/photon popularity was classified as not popular.
We found that @nanonpm/photon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.