
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
@paypal/messaging-components
Advanced tools
PayPal messaging library for integrating PayPal Credit messaging on merchant websites
A messaging component allowing easy integration of PayPal Credit Messages onto your site.
See developer.paypal.com/docs/business/pay-later/integrate/
Please feel free to follow the Contribution Guidelines to contribute to this repository. PRs are welcome, but for major changes please raise an issue first.
Set up your env:
npm install
Run tests:
npm test
Run in dev mode:
npm start
npm run build
Options
-v - version, optional-e - environment, one of production, sandbox or stage-m - module, optional, one of library, components, or render-t - tag, optional, name of the stage tag-s - testEnv, optional, link to a test environmentThe command you'll most likely need to use is
npm run build -- -t stage-tag-name -s test-environment-link
build
dist/build:<env> where <env> is stage, sandbox, or production
NODE_ENV=<env>build:analyze
build:demo
env.demo setdev
TARGET=sdk, NODE_ENV=local, STAGE_TAG=localdev:<target> where <target> is standalone, modal, or lander
TARGET=<target>, NODE_ENV=local, STAGE_TAG=localmodal uses TARGET=standalone-modaldev:<env> where <env> is stage, sandbox, or production
TARGET=standalone and NODE_ENV=<env>lint
preinstall
npm install and removes node_modules/start
npm run devtest
test:<type> where <type> is func, func:nosnaps or func:ciupdate
func runs all snapshot functional testsfunc:nosnaps runs all non-snapshot functional testsfunc:ciupdate updates all snapshots generated by functional testsnpm run dev:ci in one command line instanceintegrationType
integrationType is one of: api, sdk, standalone, or webpageCONFIG_PATH={locale}/{account} npm run test:func:snapshots -- --testPathPattern {integrationType}
Example
CONFIG_PATH=US/DEV_US_MULTI npm run test:func:snapshots -- --testPathPattern sdk
Alternatively, you can remove -- --testPathPattern {integrationType} and just run the following to run tests on an account for all integration types.
CONFIG_PATH={locale}/{account} npm run test:func:snapshots
To test against PayPal's standard stage url, ensure that the demo page contains the following script, then run npm run dev:stage:
//Change the value of the url and add the script to the demo page (i.e. standalone.html)
<script>window.__TEST_ENV__ = "https://www.{PAYPAL_STAGE_URL_HERE}.com"</script>
If you are looking to run against an alternative environment, set the window.__TEST_ENV__ global to override the environment. Please note, this is only available in development environments.
//Change the value of the test environment
<script>window.__TEST_ENV__ = "https://www.te-test-env.com"</script>
This package is published weekly, Every Wednesday. Please view our Changelog to stay updated with bug fixes and new features.
FAQs
PayPal messaging library for integrating PayPal Credit messaging on merchant websites
We found that @paypal/messaging-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 28 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.