
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@pinpt/react-components
Advanced tools
React Components is a set of commonly used UI elements and settings.
git clone this repo in a directory as a sibling to any web projectscd in to project and run npm install && npm linkcd into your web project and run npm link pinpt-react-componentsnpm linkIf npm link doesn't work, use the normal sym link command: cd in to node_modules and run
ln -s ../../react-components pinpt-react-components where ../../react-components is the relative path to the react components repo.
If you do not clone this repo into a location that is a sibling of your web projects, you'll need to ensure the web project's babel can find the component. Edit the config/paths.js file to update the location.
import { MyComponentName } from 'pinpt-react-components';
<MyComponentName data={...} />
This component library wraps the React Semantic UI library. Rather than doing this:
import { Button } from 'semantic-ui-react'
Do this:
import { PinptBaseComponents } from 'pinpt-react-components';
const { Button } = PinptBaseComponents;
This component library wraps the React ChartJS library.
import { PinptCharts } from 'pinpt-react-components';
{ Doughnut } = PinptCharts
<Doughnut data={...} />
To see all of the components in action, outside of your webapp, run npm run storybook and visit http://localhost:9001/.
To automatically generate a new component based on our internal template, run:
node generator -c MyComponentName
This script does the following:
/components/MyComponentName directorycomponents/index.jsnpm run test
All of this code is proprietary and Copyright © 2017-2019 by Pinpoint Software, Inc.
FAQs
Common React Components
The npm package @pinpt/react-components receives a total of 0 weekly downloads. As such, @pinpt/react-components popularity was classified as not popular.
We found that @pinpt/react-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.