
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@openpharma/op-js-lib-react
Advanced tools
This library is to be used with create-react-app.
You will first need to create an npm account, which can be done at the offical npm website: https://www.npmjs.com/. If you haven't already been added to the OpenPharma npm team after account creation, please contact administrator for more details to be added.
# login to npm account
npm login
# you will asked for your npm username, password and a public email
# after login you can install the private library
npm i --save @openpharma/op-js-lib-react
# to view the library op-js-lib-react components & proporties
cd npm i
cd ./node_modules
cd @openpharma/op-js-lib-react
npm start
# link this lib (if you have a permissions error, try 'sudo npm ...')
npm i
npm link
# cd into your create-react-app created project
# add material ui dependencies
cd 'your-react-app-folder'
npm i --save @material-ui/core
npm i --save @material-ui/icons
# add the linked library
npm link op-js-lib-react
# start the app
npm start
# to view the library op-js-lib-react
cd ..
cd op-js-lib-react
npm start
To run the docs just do npm start
Available here: http://localhost:6060
You can develop on the React library while simultaneously testing a dependency React app.
Run npm start to view the changes in the Documentation app.
To view changes in your dependency app have npm run watch running.
FAQs
This is the react library for OpenPharma.
We found that @openpharma/op-js-lib-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.