
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@solana-foundation/solana-lib
Advanced tools
This project uses Node v20.2.0 and has an .nvmrc
. If you have nvm
installed you can run nvm use
to switch to the correct version.
If you don't have nvm
installed you can install it here.
The recommended workflow to test within the Solana Next.js site is to run TSDX in dev mode:
yarn start
After modules have compiled and watcher is running, build the tailwind css file:
yarn build-tailwind
This builds to /dist
and runs the project in watch mode so any edits you save inside src
cause a rebuild to /dist
.
You can then symlink the package to Solana's codebase so you can import your modules from the dev build.
To link:
# In the root of this project
yarn link
Navigate to your local build of Solana's Next site and run:
# In the root of the Solana Next.js site
yarn link @solana-foundation/solana-lib
You can now import from @solana-foundation/solana-lib
and test locally.
Run inside another terminal:
yarn storybook
This loads the stories from all files with .stories
.
Storybook runs on port http://localhost:6006/
by default.
This is the basic folder structure for this project:
├── src
│ ├── components
│ │ └── CoolComponent
│ │ ├── coolComponent.stories.tsx
│ │ └── index.tsx
│ ├── molecules
│ │ └── Button
│ │ ├── button.stories.tsx
│ │ └── index.tsx
│ ├── index.tsx # Entry Point
│ └── tailwind.css # Style Entry
│
Code quality is set up for you with prettier
, husky
, and lint-staged
. Adjustments can (and will) still be made, this is just a bare-bones setup.
tsconfig.json
is set up to interpret dom
and esnext
types, as well as react
for jsx
. To prevent import errors we will add import React from 'react'
at the top of each file that uses it.
Per Palmer Group guidelines, always use named exports. Code split inside your React app instead of your React library.
This library uses relative paths for imports. Absolute paths may still pass the build, but they will break when imported into another project.
Due to complications with Bootstrap
all Tailwind utility classes are prefixed with tw-
.
The entry point for the project is src/tailwind.css
.
An icon sprite is currently generated from the src/assets/icons
directory. To add to the icon sprite just add an SVG to the directory and run yarn gen:icons
to create a new sprite.
To be less limiting in the style of icon, the generation process does NOT strip away inlined
fill
orstroke
tags. So it's important that you process the SVG beforehand to be compliant with the needs of the icon.
CJS, ESModules, and UMD module formats are supported.
The appropriate paths are configured in package.json
and dist/index.js
accordingly. Please report if any issues are found.
TSDX uses Rollup as a bundler and generates multiple rollup configs for various module formats and build settings. See Optimizations for details.
Rollup uses a minifier called Terser that doesn't support typescript optional chaining. Because of this, we need to use vanilla null checks throughout this project.
FAQs
## Node
We found that @solana-foundation/solana-lib demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.