
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@planet/ui
Advanced tools
_/\/\/\/\/\____/\/\__________________________________________/\/\__________/\/\____/\/\__/\/\/\/\_
_/\/\____/\/\__/\/\____/\/\/\______/\/\/\/\______/\/\/\____/\/\/\/\/\______/\/\____/\/\____/\/\___
_/\/\/\/\/\____/\/\________/\/\____/\/\__/\/\__/\/\/\/\/\____/\/\__________/\/\____/\/\____/\/\___
_/\/\__________/\/\____/\/\/\/\____/\/\__/\/\__/\/\__________/\/\__________/\/\____/\/\____/\/\___
_/\/\__________/\/\/\__/\/\/\/\/\__/\/\__/\/\____/\/\/\/\____/\/\/\__________/\/\/\/\____/\/\/\/\_
__________________________________________________________________________________________________
Reusable UI component and styles library for Planet built with React.
To use in your project, simply install with npm (or yarn):
With npm:
$ npm install --save @planet/ui react react-dom
With yarn:
$ yarn add @planet/ui react react-dom
@planet/ui depends on the following packages:
*Although
emotionis a dependency, you won't necessarily need to implement any of your customizations usingemotion, or use it for styling the rest of your app. Read more about usingemotionin the customization section of the wiki.
To get started developing, read our Contribution Guidelines and Wiki article on Contributing.
Clone the repository locally:
$ git clone git@code.earth.planet.com:apps/ui.git
Then navigate to the project directory:
$ cd ui
And install dependencies with npm:
$ npm install
@planet/ui comes with a development server included, so you can work on components outside of any specific project.
To develop components locally, all you need to do is:
npm run start
To create a new component from a starting template, including the styleguide markdown file, styles,
and unit tests, simply run the following command (to create a new component called Sidebar (Please
note our convention of using TitleCased names for components):
$ npm run forge Sidebar
Open the URL indicated in the terminal output to view the hot reloading enabled dev server!
There are 3 methods for running tests:
npm run test, which will verify the integrity of the installed dependencies,
and run all unit tests once.
npm run test:analyze, which will run all the unit tests once with instrumentation,
and generates code quality and test coverage reports, available via npm run report
npm run test:watch, which will run your unit tests continuously by watching source
and test files for changes.
If you encounter an error running npm run test:watch, and you are running Mac OS X Sierra, you may need to brew install watchman and try again. More info
To develop UI components locally, while seeing the changes auto-reload inside another app
you're working on (eg. explorer project):
Link @planet/ui and start the development server to watch changes:
# @planet/ui terminal window
$ npm link
Link @planet/ui to your app
# Your App terminal window
path/to/your/app $ npm link @planet/ui
Start your app's development environment as usual
# Your App terminal window
path/to/you/app $ npm run dev # or whatever your project does
Now, if you make changes to a component in @planet/ui locally, the change
will automatically reload in your app as if you had installed it with npm.
When you're finished making updates commit your changes using npm run commit (
or following conventional commits) and push to
your remote branch. @planet/ui uses commitizen to help ensure quality
master branch (after it is approved).master to get latest updates.node_modules directory: rm -rf node_modulesnpm versiongit push --tags origin masternpm publishTo patch a version, use npm version patch in step 4 above.
Check the project Wiki to learn more about @planet/ui.
Visit our Issues queue for troubleshooting and support.
FAQs
Reusable UI Component and Style library for Planet Apps built with React
The npm package @planet/ui receives a total of 1 weekly downloads. As such, @planet/ui popularity was classified as not popular.
We found that @planet/ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.