Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@planet/ui
Advanced tools
Reusable UI Component and Style library for Planet Apps built with React
_/\/\/\/\/\____/\/\__________________________________________/\/\__________/\/\____/\/\__/\/\/\/\_
_/\/\____/\/\__/\/\____/\/\/\______/\/\/\/\______/\/\/\____/\/\/\/\/\______/\/\____/\/\____/\/\___
_/\/\/\/\/\____/\/\________/\/\____/\/\__/\/\__/\/\/\/\/\____/\/\__________/\/\____/\/\____/\/\___
_/\/\__________/\/\____/\/\/\/\____/\/\__/\/\__/\/\__________/\/\__________/\/\____/\/\____/\/\___
_/\/\__________/\/\/\__/\/\/\/\/\__/\/\__/\/\____/\/\/\/\____/\/\/\__________/\/\/\/\____/\/\/\/\_
__________________________________________________________________________________________________
Reusable UI component and styles library for Planet built with React.
To use in your project, simply install with npm (or yarn):
With npm
:
$ npm install --save @planet/ui react react-dom
With yarn
:
$ yarn add @planet/ui react react-dom
@planet/ui
depends on the following packages:
*Although
emotion
is a dependency, you won't necessarily need to implement any of your customizations usingemotion
, or use it for styling the rest of your app. Read more about usingemotion
in the customization section of the wiki.
To get started developing, read our Contribution Guidelines and Wiki article on Contributing.
Clone the repository locally:
$ git clone git@code.earth.planet.com:apps/ui.git
Then navigate to the project directory:
$ cd ui
And install dependencies with npm
:
$ npm install
@planet/ui
comes with a development server included, so you can work on components outside of any specific project.
To develop components locally, all you need to do is:
npm run start
To create a new component from a starting template, including the styleguide markdown file, styles,
and unit tests, simply run the following command (to create a new component called Sidebar
(Please
note our convention of using TitleCased names for components):
$ npm run forge Sidebar
Open the URL indicated in the terminal output to view the hot reloading enabled dev server!
There are 3 methods for running tests:
npm run test
, which will verify the integrity of the installed dependencies,
and run all unit tests once.
npm run test:analyze
, which will run all the unit tests once with instrumentation,
and generates code quality and test coverage reports, available via npm run report
npm run test:watch
, which will run your unit tests continuously by watching source
and test files for changes.
If you encounter an error running npm run test:watch
, and you are running Mac OS X Sierra, you may need to brew install watchman
and try again. More info
To develop UI components locally, while seeing the changes auto-reload inside another app
you're working on (eg. explorer
project):
Link @planet/ui
and start the development server to watch changes:
# @planet/ui terminal window
$ npm link
Link @planet/ui
to your app
# Your App terminal window
path/to/your/app $ npm link @planet/ui
Start your app's development environment as usual
# Your App terminal window
path/to/you/app $ npm run dev # or whatever your project does
Now, if you make changes to a component in @planet/ui
locally, the change
will automatically reload in your app as if you had installed it with npm
.
When you're finished making updates commit your changes using npm run commit
(
or following conventional commits) and push to
your remote branch. @planet/ui
uses commitizen to help ensure quality
master
branch (after it is approved).master
to get latest updates.node_modules
directory: rm -rf node_modules
npm version
git push --tags origin master
npm publish
To patch a version, use npm version patch
in step 4 above.
Check the project Wiki to learn more about @planet/ui
.
Visit our Issues queue for troubleshooting and support.
FAQs
Reusable UI Component and Style library for Planet Apps built with React
We found that @planet/ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.