
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@trafilea/afrodita-components
Advanced tools
Reusable ReactJS components for Afrodita Design System.
Afrodita Components is avaiable as an npm package:
npm install @trafilea/afrodita-components
import { ButtonPrimary } from '@trafilea/afrodita-components';
function App() {
return <ButtonPrimary text="Click me!" onClick={() => console.log('Button clicked')} />;
}
Clone the project
git clone https://github.com/trafilea/afrodita-components.git
Go to the project directory
cd afrodita-components
Install dependencies
npm install
Start storybook
npm run storybook
Visit our Storybook deployed in Chromatic.
In this section we define what versioning policy we’re using for this project. We follow Semantic Versioning principles, a well known and simple way of software versioning.
Given a version number MAJOR.MINOR.PATCH, increment the:
Additional labels for pre-release are available as extensions to the MAJOR.MINOR.PATCH format.
Major releases can also contain new features, and any release can include bug fixes.
For more information, visit this confluence document.
Note: In this project we’re using the Gitflow workflow.
Beta versions target the develop branch and they are not required. We’ll release new beta versions on demand. The CI/CD pipelines will take care of the deployment to the NPM repository every time a new version increment is detected.
Production versions target the main branch. Ideally, we want to release new prod versions between medium or small intervals of time to let our consumers adopt the latest versions frequently. The CI/CD pipelines will take care of the deployment to the NPM repository every time a new version increment is detected.
FAQs
Trafilea's Design System
The npm package @trafilea/afrodita-components receives a total of 827 weekly downloads. As such, @trafilea/afrodita-components popularity was classified as not popular.
We found that @trafilea/afrodita-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.