
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@octopusthink/nautilus
Advanced tools
Nautilus is an open-source design system and component library to help designers and developers build better digital products together. ❤️
Nautilus is available both as a Sketch library and an npm
package for use in React projects.
https://nautilus.octopusthink.com/
Nautilus is currently pre-pre-pre-beta software. You can feel free to use it in your projects, but be warned that the API is likely to change and things may work in unexpected ways.
Point releases are distributed to npm
on the 5th of every month. You can see our near-term plans and upcoming components in the Project tab.
Want to use Nautilus in your next web app? Well: don't! It's much too early and it's nowhere near ready for production usage. Check back later. 😅
You can technically install it from NPM, but you can't say we didn't warn you!
npm install @octopusthink/nautilus
Want to contribute to Nautilus, or test it locally? Here's how!
node
(LTS)npm
Clone the repo:
git clone https://github.com/octopusthink/nautilus.git
Navigate into the directory:
cd nautilus
Install the dependencies:
npm install
And use npm
to compile files, watch for changes, and build the styleguide:
npm start
This will start a server for the styleguide at http://localhost:6060/ and watch for any changes.
You'll need to restart npm
if you make changes to styleguide.config.js
, but otherwise you should be good to go!
We use jest
to run our unit tests. If you've made changes, jest
will only run tests on files related to your changes:
npm test
We lint our code using eslint
and prettier
. You can check your changes for linting violations with:
npm run lint
Please read (CONTRIBUTING.md
) for details on our code of conduct and the process for submitting pull requests.
We use the Conventional Commits specification for commit messages to ensure that commit messages are written in a consistent and predictable way.
We use SemVer for versioning. For the versions available, see the releases page.
See also the list of contributors who participated in this project.
This project is licensed under the MIT License - see the LICENSE.txt file for details.
Nautilus has been heavily inspired by, and borrows from:
FAQs
Nautilus design system for React
We found that @octopusthink/nautilus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.