
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@underdogio/pup
Advanced tools
Underdog.io's component library.
// Import non-component base styles for stuff like typography.
// This should be done once in your project.
import '@underdogio/pup/styles/pup.scss'
import React, { Component } from 'react'
import Alert from '@underdogio/pup/components/alert'
class Application extends Component {
render() {
return (
<Alert type="success" onClose={() => console.log('closed')}>
Nice work!
</Alert>
)
}
}
Because components include CSS and other non Javascript imports, you will also need webpack. We recommend using @underdogio/webpack-config so you won't have to create a new webpack config from scratch.
yarn add @underdogio/pup @underdogio/webpack-config
Pup is built off of Storybook. You can start Storybook by running:
yarn develop
You will then be able to access the Storybook frontend at http://localhost:9001.
Every component should have its own directory under the components/
directory (e.g. /components/button/
) with the following files:
Source code for the component. Be sure to include prop types.
Styles for the component. This file should be imported by index.jsx
.
Storybook stories and documentation.
Mocha tests.
Bump the npm package version number with yarn version
.
yarn version --new-version <new-version-number>
Push the new tag and package.json
update to GitHub.
git push origin master --tags
Publish to npm.
npm publish
You can deploy a new version of the component library frontend to GitHub pages by running:
yarn deploy
FAQs
Underdog.io's component library.
We found that @underdogio/pup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.