
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@podme/podme-ui
Advanced tools
Podme UI is a comprehensive library of UI components that can be imported into other Podme projects. This Storybook serves as a single source of truth for all Podme UI components, providing an isolated environment for developing, testing, and reviewing each component's various states.
Each component in this Storybook represents a reusable piece of UI that has been decoupled from the app's business logic, data, and context. This makes it easier to develop and test hard-to-reach states. You can save these UI states as stories to revisit during development, testing, or QA.
Browse the available components now by navigating to them in the sidebar. View their code in the stories
section to learn how they work.
To install the @podme/podme-ui
package, you can use npm or yarn:
npm install @podme/podme-ui
or
yarn add @podme/podme-ui
To use a component from the Podme UI library, you can import it into a project like so:
import { Button, PodmeColor } from "@podme/podme-ui";
function MyApp() {
return (
<Button backgroundColor={PodmeColor.SoftWhite} onClick={handleClickFn}>
Get Premium
</Button>
);
}
Remember to include the necessary peer dependencies in your project as well. The @podme/podme-ui package requires react, react-dom, and tailwindcss to be installed in your project.
npm install react react-dom tailwindcss
or
yarn add react react-dom tailwindcss
npm run build
in the UI library project. This will create or update the dist
folder.dist
folder from the UI library into the node_modules
folder of your Next.js project.node_modules
automatically. It caused us some issues in the past so it's not a default approach for us atm.
package.json
by appending a specific naming convention:
1.0.5-feature-[TicketNumber].0
.[TicketNumber]
should match the ticket number associated with the feature branch.npm run build
to ensure the project is built.npm publish --tag feature-[TicketNumber]
. This ensures the feature version is published with a custom tag, not the default latest tag.
In the Next.js project, run pnpm install @podme/podme-ui@feature-[TicketNumber]
. This will install the specific feature version of the Podme UI library. After installing, your project should be able to use the updated UI library from the feature branch.
Each time you make changes to the feature branch, increment the last digit of the version in package.json
. For example, if the initial version was 1.0.5-feature-[TicketNumber].0
, the next iteration would be 1.0.5-feature-[TicketNumber].1
, and so on. Continue publishing updates using the same tag format.
FAQs
A UI library for Podme
The npm package @podme/podme-ui receives a total of 0 weekly downloads. As such, @podme/podme-ui popularity was classified as not popular.
We found that @podme/podme-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.