
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@overdose/components
Advanced tools
An atomic component library by Overdose.
yarn add @overdose/components @overdose/theme
yarn add @overdose/design-tokens-transformer -D
@overdose/components
package contains the base react components@overdose/theme
package contains themeable CSS variables the base components depend on@overdose/design-tokens-transformer
package contains a script to transform design tokens exported from Figma into theme CSS variablesImport the component and theme stylesheets into your App
file.
_app.tsx
app.scss
App.server.tsx
App.js
global.css
// JavaScript/TypeScript
import '@overdose/components/build/esm/styles.css'
import '@overdose/theme/styles.css'
import { Typography } from '@overdose/components';
const MyComponent = () => (
<Typography tag="p">
What's up, Doc?
</Typography>
);
Components are highly themeable both globally and locally.
Design tokens can be exported from Overdose-made Figma design files and automatically converted to CSS variables with @overdose/design-tokens-transformer
.
/theme/tokens/design-tokens.tokens.json
)yarn transform-design-tokens build -s "<SOURCE_PATH>" -d "<DESTINATION_PATH>"
For example:
yarn transform-design-tokens build -s "./theme/tokens/design-tokens.tokens.json" -d "./theme/__generated__/"
App
file after @overdose/theme/styles.css
.// JavaScript/TypeScript
import '@overdose/components/build/esm/styles.css'
import '@overdose/theme/styles.css'
import 'theme/__generated__/_tokens.css'
:root {
--btn-border-radius-default: 4px;
}
Components expose a type-safe theme
prop which allows passing in new class names for the component's root element and child elements.
For example:
import { Accordion, AccordionItem } from '@overdose/components';
import styles from './MyComponent.module.css';
<Accordion
theme={{
root: styles.accordion,
}}>
<AccordionItem
name={'That\'s all folks!'}
theme={{
active: styles.accordionActive,
title: styles.accordionTitle,
content: styles.accordionContent,
}}>
{/* ... */}
</AccordionItem>
</Accordion>
Visit the docs site for more detailed usage and the contributing quick-start guide for a quick overview of how to contribute to the project.
FAQs
An atomic component library by Overdose.
The npm package @overdose/components receives a total of 120 weekly downloads. As such, @overdose/components popularity was classified as not popular.
We found that @overdose/components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.