
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@pinpt/react
Advanced tools
npm i @pinpt/react
After installation, import the base styles. This is similar to a style reset and includes only the minimal styles for basic functionality.
The library is designed to be easily themable with CSS.
import '@pinpt/react/dist/base.css';
Components can be imported as so:
import { Statistic } from '@pinpt/react';
const component = () => <Statistic.Bar claps={21} views={5} />;
There are two primary ways to build a site using this library, either using prebuilt components, or custom-building the application yourself. Using prebuilt components is the easiest way to get up and running, and you can read more about them here.
Using the components individually provides for more customization options, but you'll need to be careful to include a few important parts. The most important is the Pinpoint component to wrap your content entries. Without this, analytics and link unfurling will not work as expected. Read more about implementation here.
Check out the docs for detailed implementation guides. You can also play with the Interactive Storybook
If you want to do local dev with the App Template you can use the following:
In this folder, cd into node_modules and then:
cd react && npm link
cd react-dom && npm link
This will link te react and react-dom libraries so they can be used by the other project.
Then, in the app-template folder, run:
npm link react react-dom
This will then link those library into the node_modules for app-template and then allow you to make changes to this project and then test them live in the other. You'll still need to run npm run build with each change to make sure those changes are compiled and then npm run dev in the app-template to pick them up.
FAQs
The Pinpoint UI Library for React
The npm package @pinpt/react receives a total of 0 weekly downloads. As such, @pinpt/react popularity was classified as not popular.
We found that @pinpt/react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.