Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
@ovidb/react-component-library-starter
Advanced tools
I found it a bit annoying that I couldn't find a good starter package for creating a React Component Library in Typescript with automatic semantic release setup, so I decided to write this package
🤷♂️I will try to make this a bit more automatic, but until then some manual work will be needed.
I would start with cloning this repo locally
git clone git@github.com:ovidb/react-component-library-starter.git
Then just rename the project folder, remove the .git
folder so you can start fresh with a git init
mv react-component-livrary-starter my-react-component
cd my-react-component
rm -rf .git
git init
npm install
Then Rename project name, description, homepage, bugs, repository links in package.json
and
make sure the version is 0.0.0. This is required so that you can sensibly start at version
1.0.0 when semantic release will run in CircleCI.
README.md
change the link of the coverage badge to point to your own repository
You will have to signup for account with coveralls.io. We'll setup this later on,
but for now you can just put a link that will match your github repo url.You should also change the README.md
file to describe what is so fabulous about the component
you're building
Create a new repo in github and add it as an origin
git remote add origin git@github.com:your-user-name/my-component-library.git
Now let's commit the changes
⚠️ Warning
You will need to use conventional commit format to benefit of automated semantic release and changelog generation
Commit and and push
yarn commit
git push
At this point CircleCI will probably fail because you haven't setup the required tokens
Configure CI/CD:
To support semantic-release
you'll have to generate a Github token and npm token.
Login to CircleCI.
Find your project and add environment variables for GITHUB_TOKEN
and NPM_TOKEN
environment variables. These are needed by semantic-release for GITHUB_TOKEN
, NPM_TOKEN
and CODECOV_TOKEN
and a CACHE_VERSION
.
CACHE_VERSION
is used to manually invalidate CircleCI cache if needed. The initial value can be 00001
.
The reason for the leading 0
s is so that the latest value is visible in Environment Variables view.
Now you can head back to CircleCI and rerun the release workflow.
FAQs
A React Component library starter
The npm package @ovidb/react-component-library-starter receives a total of 0 weekly downloads. As such, @ovidb/react-component-library-starter popularity was classified as not popular.
We found that @ovidb/react-component-library-starter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.