
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@paystack/pax
Advanced tools
npm install @paystack/pax
Follow the following steps to setup the project for local development:
Clone the project
git clone https://github.com/PaystackHQ/pax.git
Install dependencies
npm install
Launch Storybook
npm run storybook
Run tests
npm run test
To create a new component, run npm run new:component and you will be prompted for a component name and an optional path (relative to /src/components) if the component requires a custom location.
Answering both questions will create the following directory structure with basic boilerplate in the generated files.
[component_name]
┣ [component_name].stories.tsx
┣ [component_name].test.tsx
┗ index.tsx
Versions are automatically managed by semantic-release which relies on commit messages to determine how to bump version numbers; features bump to a major semver version while fixes bump to a minor version.
This library uses Commitizen to enforce commit message styles so this hijacks your normal commit flow and instead guides you through prompts on the command line.
PAX is automatically packaged and published to npm from the external branch.
Interested in contributing? Thanks so much for your interest! If you have a bug to report, or maybe an improvement, please check out our Jira Board.
FAQs
Paystack's React component library based on PAX
The npm package @paystack/pax receives a total of 108 weekly downloads. As such, @paystack/pax popularity was classified as not popular.
We found that @paystack/pax demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.