Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@worldresources/gfw-components
Advanced tools
React component library for the Global Forest Watch project.
A React component library for the Global Forest Watch project built with Emotion CSS in JS styled components. All features have support for Server Side Rendering (SSR), the latest two versions of evergreen browsers and IE>=11. All designs for these components are based on the Global Forest Watch UI kit.
The library can be installed in two ways:
Install the package
npm install @worldresources/gfw-components
or with yarn
yarn add @worldresources/gfw-components
import and add the global styles component to the root of your app
import React from 'react'
import { GlobalStyles } from '@worldresources/gfw-components'
export const App = () => (
<>
<GlobalStyles />
<Main />
</>
)
add the font to your html document
<link
href="https://fonts.googleapis.com/css2?family=Fira+Sans:ital,wght@0,300;0,400;0,500;0,600;1,300;1,400;1,500;1,600&display=swap"
rel="stylesheet"
/>
then import components and add them to your layout
import React from 'react'
import { Header, Footer } from '@worldresources/gfw-components'
export const MyPage = () => (
<div className='l-page'>
<Header />
<div className='content'>
<h1>My page</h1>
</div>
<Footer />
</div>
)
If you are using @worldresources/gfw-components
as a npm module there are some external requirments:
react >= 16.8
react-dom >= 16.8
The static build serves as a minimum requirement for the library providing only the global styles, header, footer, and contact us modal such that is can be injected into your site without the need for a react application. The bundle is passed through the same webpack production
environment build to optimize for performance and minimization.
Add the following script tag and font to the head of your app.
<script
type="text/javascript"
src="https://gfw-assets.s3.amazonaws.com/static/gfw-assets.latest.js"
preconnect
></script>
<link
href="https://fonts.googleapis.com/css2?family=Fira+Sans:ital,wght@0,300;0,400;0,500;0,600;1,300;1,400;1,500;1,600&display=swap"
rel="stylesheet"
/>
And then place inside the html docment tags with the following ids:
<!-- place where you want the header -->
<div id="headerGfw"></div>
<!-- place where you want the footer -->
<div id="footerGfw"></div>
<!-- place at the bottom of your html document -->
<div id="contactGfw"></div>
You can pass props to the <Header />
using the window
window.gfwHeader = {
languages,
afterLangSelect,
customLogo
}
Once you have cloned the repo, install the dependancies and start the styleguide.
yarn && yarn start
If you need to develop with the component library directly inside your app, you can use Yalc in lieu of yarn link
.
To do so you need to:
yarn global add yalc
or
npm install -g yalc
Important: you have to change the version inside the package.json
every time you compile to avoid issues with the node_modules
aggresively caching the library, preventing from seeing your latest changes.
Once your changes are good and tested, be careful not to commit the changes in package.json
.
yarn compile
yalc publish
yarn remove @worldresources/gfw-components
yalc add @worldresources/gfw-components
yarn install # or just yarn
To deploy a new version of the library follow these steps:
release [major|minor|patch]
yarn deploy
npm publish
NOTE: for AWS you will need to have the creds present in your .env
file.
The <Header />
comes with a default language dropdown component with built in support for Transifex or your choice of translation method. To use the default language selector make sure you add the Transifex Live snippets to the head of your site. If you are using the static script you must add the Transifex script to translate your site.
FAQs
React component library for the Global Forest Watch project.
The npm package @worldresources/gfw-components receives a total of 53 weekly downloads. As such, @worldresources/gfw-components popularity was classified as not popular.
We found that @worldresources/gfw-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.