
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@postscript/components
Advanced tools
The main branch is used to create a Storybook instance at components.postscript.io, via Chromatic.
This repo generates an NPM package of components. Use components by importing them individually.
npm i @postscript/components
Note: If you are not seeing the latest version of this package, you may need to
run @npm i @postscript/components@latest.
import { Button } from '@postscript/components';
const App = () => <Button>A Happy Button</Button>;
Import our base CSS once in your project.
import '@postscript/components/dist/esm/main.css';
Import React Toastify CSS if needed.
import 'react-toastify/dist/ReactToastify.css';
Currently, the easiest way to test changes from a feature branch in another repo is to publish a one-off, unique version of the package under a tag specific to you. View instructions
Commits to main will publish a new @postscript/components package version. Use one of the following conventions when commiting/titling PRs to control semantic versioning.
BREAKING CHANGE: prefix to the commit message (bumps the major version X.#.#)feature: or feat: prefix to your commit message (bumps the minor version #.Y.#)#.#.Z)Follow your commits to postscript-frontend, and address any changes needed to bump version.
PRs require one engineer approval. If working with a designer, tag them as well. Directly requesting review from those with good knowledge of your changes is helpful if they're available.
Additionally, post for review in #pull-requests and #front-end.
We utilize SVGR CLI to turn SVGs into React components. See .svgrrc.js for our
config.
src/icons/npm run svgrimport * as React from 'react'; to the new module(s)src/icons/index.ts; IconSet uses this barrelIcon story examples automatically if everything has worked correctlyWe utilize the following automatic transformations.
Create your component with Typescript, its corresponding Storybook file, and a unit test file.
!! Be sure to add your new component to the exports list in src/index.ts and organize its display order in .storybook/preview.js
Code Connect is the developer bridge from your component codebase to Figma. With Code Connect, bring your design system component code directly into Figma's Dev Mode. Preview example components that mirror the framework of your production code.
Code Connect uses [componentName].figma.tsx files to link code component properties with Figma component properties. Once the files are created and published, direct code output for the specified components will be visible in Figma's Dev Mode. Learn More
Once created, the files only need to be modified when component updates are made.
To enable Figma Code Connect integration:
You must have:
npm install --global @figma/code-connect@latest
In Figma, generate a personal access token in your account settings under the Security tab (more info).
Create a new .env file:
touch .env
(Note: This file is listed in .gitignore and will not be listed as part of your commit.)
Then add the following to your .env file, along with your access token:
FIGMA_ACCESS_TOKEN="[your token here]"
Making update to a component:
.figma.tsx file next to your componentnpx figma connect publish to publish the changes to FigmaWorking with new components:
.figma.tsx file alongside your component (e.g., Button.figma.tsx next to Button.tsx)figma.connect() to link the component to your Figma designnpx figma connect publish to publish the changes to FigmaExample .figma.tsx file:
import figma from '@figma/code-connect';
import React from 'react';
import MyComponent from './MyComponent';
const noop = () => {
/* no-op */
};
figma.connect(MyComponent, 'https://www.figma.com/file/...', {
props: {
// Define component props that can be controlled in Figma
size: figma.enum('Size', {
Small: 'small',
Medium: 'medium',
Large: 'large',
}),
// Use noop for event handlers
onClick: figma.boolean('Has Click', {
true: noop,
false: undefined,
})
}
});
For more details, see the Figma Code Connect documentation.
FAQs
Postscript Component Library
The npm package @postscript/components receives a total of 1,002 weekly downloads. As such, @postscript/components popularity was classified as popular.
We found that @postscript/components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.