
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@olist/ui-commons
Advanced tools
UI-commons is a library of components used in applications developed by olist.
yarn add @olist/ui-commons
After that you'll be able to import it in your project and use the components and helpers.
import { createForm } from '@olist/ui-commons/utils';
It was built on top of React 16.
yarn for packages management.Ok, you're looking forward to contributing, so follow the instructions.
If you're here, you already have access to the repository, haven't you? So, just clone the project and install the dependencies.
git clone git@github.com:olist/olist-ui-commons.git
cd olist-ui-commons/
yarn
yarn dev
If everything's ok with your environment, all dependencies should've been installed, but if something went wrong feel free to create an issue reporting the problem.
This starts building, watching the changes and running the server.
yarn build
We're automanting with release-it, but it's not working yet.
For now, you should manually change the version in package.json.
yarn test
// or
yarn test:watch
yarn lint
To publish, just run:
make publish
It'll assure that tests were run and UI-Commons was built along with its component styleguide documentation, and was deployed in Heroku.
Take a look at docz documentation
FAQs
olist design language system
The npm package @olist/ui-commons receives a total of 10 weekly downloads. As such, @olist/ui-commons popularity was classified as not popular.
We found that @olist/ui-commons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 31 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.