
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@noths/storefront
Advanced tools
Storefront is a library to help rendering storefronts.
It is full SSR (server side rendering) "compliant" as it does work without having client side interfaces like window or document, either in the source code or in the build process, because we don't rely on any bundler like webpack for distributing the server-side code of the library. We only use it for development purposes and distributing the client side bundle.
This library was extracted from noths-storefront service. We maintained all the logic with new and updated dependencies. You can read more about it here.
Execute the commands below to start a development server.
npm i
npm run start
Now visit http://localhost:8080
It uses the files under the build-dev folder to serve a development version of it with mocked data.
npm run build
The following will be available in the ./dist folder:
entire source code transpiled with babel so it can safely be used as a common-js module in a node js environment
entire source code worked and packed with webpack in the app.js
the assets like png's
the stylesheets from the app and styles-toolkit
You'll need to register on npm by running npm adduser. If you're already registered on npm, use npm login instead.
In order to publish:
the version bump should be part of the pull request
after a successful merged pull request you will have to:
npm publish
npm i @noths/storefront
import { prepare } from '@noths/storefront'
// data as in the content that was fetched from the s3 bucket populated by https://github.com/notonthehighstreet/partner-content
const dataContainer = prepare(data)
// you can also use other functions from ReactDOMServer
// the resulting container should embeded in an html document
// for more info look at the example in https://notonthehighstreet.atlassian.net/wiki/spaces/T8B/pages/758349860/Storefront-frontend
ReactDOMServer.renderToString(dataContainer)
We can also see a working example in the index.js under ./build-dev folder.
npm run test
npm run test:coverage
FAQs
storefront for noths partners
The npm package @noths/storefront receives a total of 6 weekly downloads. As such, @noths/storefront popularity was classified as not popular.
We found that @noths/storefront demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 27 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.