
Product
Introducing PHP and Composer Support in Socket
Socket now supports PHP with full Composer and Packagist integration, enabling developers to search packages, generate SBOMs, and protect their PHP dependencies from supply chain threats.
@telerik/kendo-react-component-base
Advanced tools
A starter repository for Kendo UI React components, which provides the basic directory structure and dependencies.
The src directory contains the component source code. All files should be have the .jsx extensions so that the build scripts may pick them.
The src/main.jsx file should import and re-export all public components of the package. It is used for the build-cdn task. It is also the main entry point for the NPM package (as specified by the package.json). The build-npm-package transpiles it to dist/npm/js/main.js;
The src/Component.jsx file is the actual sample component implementation.
The src/util.jsx is an optional example of an additional file - you may remove it if unnecessary.
The examples directory hosts the demos for the component. As a bare minimum, the component should have a basic usage and a CDN example. The CDN example should work as expected after the build-cdn task has been run.
The test directory contains the component tests. They are transpiled just like the source code itself, and are run with Jasmine in NodeJS.
The e2e directory contains the end-to-end tests. They are transpiled just like the source code itself, and are run with Karma and Jasmine in the browser.
The docs directory contains markdown files that document the specifics of the component.
build-npm-package - builds the scripts and styles in dist/npm in CommonJS format;build-cdn - builds the scripts and styles in dist/cdn in UMD format.start - starts the webpack-dev-server (with browsersync in front of it) - suitable for example preview, development and testing.test - runs the tests with Jasmine in NodeJS.watch-test - runs the tests in watch mode.docs - launches a preview server for the documentation in the docs directoryFAQs
Kendo UI React component starter template
We found that @telerik/kendo-react-component-base demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now supports PHP with full Composer and Packagist integration, enabling developers to search packages, generate SBOMs, and protect their PHP dependencies from supply chain threats.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

Research
/Security News
Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.