
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@verkstedt/summon-components
Advanced tools
generates react components (incl storybook, test and scss file)
Small cli tool to create react components and its associated files.
.summon
folder.summon/options.js
(see option file)npm summon <ComponentPath> [-t <tags>]
<ComponentPath>
specifies the path to the component with the components name as last path segment
By default, summon
will just create files whos tag is contained inside of the tagsDefault
option. This value can be overwritten by the -t <tags|comma-sepearated>
flag (e.g. -t index,style,story
).
You're options reside in .summon/options
.
An default structur for the file can be found in summon-components/src/defaults.json
.
option overview:
"srcPath": <string> // defines the src path inside of you're project (e.g. `src` or `app`).
"component": {
"tagsDefault": <array|strings>, // defines which tags will be used when non are passed as cli argument
"vars": <object>, // custom template variables
"files": [ // describe the possible file options
{
"tag": <string>, // identifger for the file (available in template and can be used as filter in the cli)
"template": <string> // path to the template file (inside of `.summon/templates`)
"target": <string/handlebars> // target path for the generated file, handlebars can be used (see [template variables](#template-variables))
}
]
}
Each file specified in options has a template property which referes to a template which will be used to create the file. Variouse variables are available inside this handlebar template (see template variables).
Templates reside in .summon/templates
and can be of any filetype.
Template files and the target
property of a file can be expressed as a handlebars template, following variables are available:
name: Name of the Component as specified by the cli argument
name_lower: Name in lowercase
name_upper: Name in Uppercase
name_lcFirst: Name with lowercase first
name_ucFirst: Name with uppercase first
srcPath: Src Path as specified by the options
path: Path to the Component as specified by the cli argument
full_path: Path with prepended <srcPath>
pwd: Absolute path from where <summon> was called
tags: Object containing all tags (as <tag: true>) specified either by the options or the cli arguments
vars: Object containing custom variables which can be used in all templates (path and file)
// only available inside of file templates
target: Final Path where the current file will be created
FAQs
generates react components (incl storybook, test and scss file)
We found that @verkstedt/summon-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.