Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
@wealthsimple/angular-directives
Advanced tools
Angular directives shared between our UIs.
install it locally with npm
npm install --save @wealthsimple/angular-directives
or with yarn
yarn add @wealthsimple/angular-directives
make sure you also have the following installed:
Check peerDependencies
in package.json
for specific versions.
Checkout out our fancy Github page!
npm install
to install dev dependenciesnpm run start:dev
o watch & build files, and serve up the examples page.As you make changes, the output will be rebuilt and the browser will re-load your changes automatically.
Use npm link
if you'd like to reference this library locally from another ng project
npm link
in root of this librarynpm link @wealthsimple/angular-directives
in the root of the other ng project to refer to your local version of this library.If you have merge rights, you should also have the ability to release new versions (you know who to ask for access).
We currently publish on the npm
package registry.
Once you merge a change to master, follow the steps below to issue a new release of this package:
Please follow semantic versioning. Seriously, this is super important. If you don't and downstream users are careless with their shrinkwrapping strategy, you may break them.
Once you've picked a new version number, update the version
field in package.json
to that version. This is what NPM will use. Also run this command locally:
npm run prepublishOnly
This regenerate the github-pages content in docs
.
Get this PRed up and approved, then merge it.
At this point gh-pages is using the new code
master
branch only please. This will prompt
you to enter some info about what's in the new release. Be descriptive! This serves as our changelog, and your colleagues will thank you. Screenshots of new controls/features are handy too.For npm
you need to manually publish. Go to your terminal, rebase latest master, and run:
npm login
npm publish
This runs the unit tests and uploads the source to npm
's registry. Note that as
of 5.0.0 we don't distribute transpiled ES5/CSS any more. Consumers are expected to
transpile the ES6/SCSS using their own toolchain.
Sure, make a PR. Get someone from #web-tech-maintenance to review it though, so we can check that the license is in line with policies, etc. Be aware that this is the start of the conversation though. Pulling in new libs requires a little extra diligence from the broader team.
Also think about whether it should be a dependency or a peerDependency.
These are for things that you don't expect consumers to also be using. So, really specific libs that are implementation details of a component for example.
Generally it should be pretty rare to add new dependencies.
Peer dependencies are for things that you expect consumers to also be using directly. We expect consumers to install them alongside ws-directives (npm will give them an error if they don't).
So for example, AngularJS is a peer dependency.
Most of the time, new deps will be peer dependencies.
To add a peerDependency, do three things:
peerDependencies
in package.json
: specify a version range that we'll commit to working with. Our webpack config loads the list of peerDependencies
and marks them as external
, meaning if you import
them in code, webpack won't include them in our bundle.devDependencies
so you can develop against itindex.html
to pull the lib in from a CDN. I recommend http://unpkg.com, which is a thin wrapper over the npm registry exposed as a CDN.My default stance is: yes in consuming projects, but probably not in ws-directives. Those libs are pretty big and I don't want to force consumers to include them.
The good news is we do expect consumers to target modern JavaScript runtimes, with polyfills as necessary (e.g. core-js). Which means you can use array.map
, array.prototype.includes
, array.prototype.reduce
, array.prototype.filter
, Array.prototype.forEach
, etc. That should cover most of your underscore needs. If it doesn't, post in #web-tech-maintenance and we'll discuss it.
npm run test
.npm run start:dev
, open http://localhost:8080
.npm run build:docs && open docs/report.html
FAQs
Angular directives shared between our UIs.
The npm package @wealthsimple/angular-directives receives a total of 6 weekly downloads. As such, @wealthsimple/angular-directives popularity was classified as not popular.
We found that @wealthsimple/angular-directives demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.