
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@payfit/midnight
Advanced tools
React UI components for the PayFit Design System
yarn add @payfit/midnight
(or npm i -S @payfit/midnight
)import { Text, Button } from '@payfit/midnight'
yarn
yarn start
(will start the storybook)http://localhost/9001
on your favorite browser (Chrome)yarn test
npm login
(login info in 1Password at npm)git config --global push.followTags true
(will push tags with git push
automatically)npm version patch|minor|major
npm publish
git push
Make sure you did this before: https://www.notion.so/payfitapp/Connecting-to-our-staging-preprod-testing-Kubernetes-cluster-Getting-started-1ca6f236d9d64e2c8ea292cb6c6f55f1
You'll need helm:
brew install kubernetes-helm
Push your work, make sure CircleCi has finished its jobs (https://circleci.com/gh/PayFit/workflows)
Then if you want your work be accessed from: 'midnight-[branch-name].payfit.tech', you can deploy it through helm:
# Deploy
helm upgrade --namespace midnight --install [branch-name] ./deploy/website
# List deployed storybooks
helm list --namespace midnight
# Delete storybook named X when running the list command
helm del --purge [branch-name]
Starting now, when your branch will be updated, deployment will automatically be updated.
WARNING: If your branch name contains a non-alphanumerical character (such as / \_
) it will be replaced by -
.
When you don't need to publish a branch anymore, don't forget to purge it.
FAQs
React UI components library for the PayFit Design System
We found that @payfit/midnight demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.