
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@pega/cosmos-react-core
Advanced tools
Cosmos is a visual design system and UI component collection. Its goal is to empower application developers in their pursuit to create engaging and rewarding user experiences.
Cosmos is a visual design system and UI component collection. Its goal is to empower application developers in their pursuit to create engaging and rewarding user experiences.
The recommended approach for using Cosmos is individual component imports to bundle with a method of your choosing.
import ReactDOM from 'react-dom';
import { SomeComponent } from '@pega/cosmos-react-core';
ReactDOM.render(<SomeComponent {...props} />, el);
Cosmos adheres to the following code style guides:
These are enforced by ESLint, Prettier and Stylelint with settings some overridden/ignored. If you feel a certain coding style is better suited this project or should be allowed please speak up and advocate. Shoot for consistency and cleanliness.
With that, please take a moment to setup Visual Studio Code. We require the following extensions to be installed:
Cosmos will check the format of your code and fail builds on linting errors so best to have your workspace in sync as you go. Next...
Clone Cosmos:
$ git clone https://github.com/pegasystems/cosmos-react.git
Install node_modules:
$ npm i
Start Cosmos dev server to run Storybook:
$ npm run start:stories
Create your first component - Component names must capitalized, containing only letters:
$ npm run create:component name:YourComponent [type:fn(default)|class|ref] [test:false(default)|true]
This cmd will generate a directory at /packages/cosmos-core/components/YourComponent/ with the following files:
YourComponent.tsx
- A React component populated with some basic boilerplateYourComponent.stories.tsx
- A file used for the Storybook documentation that will hold demo componentsYourComponent.test.ts
- An empty file to use for test code, optionalindex.ts
- An index file that will re-export the default export from your component fileInside YourComponent.tsx
will be some initial boilerplate:
import { forwardRef, FunctionComponent, PropsWithoutRef, Ref } from 'react';
import styled from 'styled-components';
import { BaseProps, ForwardProps, PropsWithDefaults } from '../../types';
import { defaultThemeProp } from '../../theme';
export interface YourComponentProps extends BaseProps {
ref?: Ref<HTMLDivElement>;
}
type YourComponentPropsWithDefaults = PropsWithDefaults<YourComponentProps>;
const StyledYourComponent = styled.div<YourComponentPropsWithDefaults>``;
StyledYourComponent.defaultProps = defaultThemeProp;
const YourComponent: FunctionComponent<YourComponentProps & ForwardProps> = forwardRef(
(props: PropsWithoutRef<YourComponentProps>, ref: Ref<HTMLDivElement>) => {
return <StyledYourComponent ref={ref} {...props} />;
}
);
export default YourComponent;
The YourComponent.stories.tsx
file will provide a hot reloading dev environment in Storybook:
import YourComponent from './YourComponent';
// These are settings that storybook will use to render your component's stories
export default {
title: 'Components/YourComponent',
component: YourComponent
};
// This is the first story in your component's story book section
export const firstYourComponent = () => <YourComponent>Hello YourComponent</YourComponent>;
FAQs
Cosmos is a visual design system and UI component collection. Its goal is to empower application developers in their pursuit to create engaging and rewarding user experiences.
The npm package @pega/cosmos-react-core receives a total of 2,026 weekly downloads. As such, @pega/cosmos-react-core popularity was classified as popular.
We found that @pega/cosmos-react-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.