
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
@ws-ui/ui-components
Advanced tools
A comprehensive design system built with React, TypeScript, TailwindCSS, and Storybook for Qodly. This library provides a collection of reusable, accessible, and customizable UI components with consistent styling and behavior using a modern configuration-driven architecture.
# Clone the repository
git clone https://git.4d-ps.com/4d/web-studio/design-system.git
cd design-system
# Install dependencies
npm install
# Start the development server
npm run dev
# Run Storybook for component development
npm run storybook
# Build the project
npm run build
# Run linting
npm run lint
View all components and their documentation in Storybook:
npm run storybook
This will start Storybook on http://localhost:6006 where you can:
src/ # Reusable UI components
│ ├── Checkbox/
│ │ ├── Checkbox.tsx # Component logic & rendering
│ │ ├── Checkbox.stories.tsx # Storybook documentation
│ │ ├── Checkbox.test.ts # Unit tests
│ │ ├── checkbox.types.ts # TypeScript definitions
│ │ ├── checkbox.style.ts # Styling configuration
│ │ └── index.ts # Clean exports
│ ├── Radio/
│ │ ├── Radio.tsx
│ │ ├── Radio.stories.tsx
│ │ ├── Radio.test.ts
│ │ ├── radio.types.ts
│ │ ├── radio.style.ts
│ │ └── index.ts
│ └── ... # Other components
├── styles/ # Global styles and themes
src/components/ComponentName/ComponentName.tsx - Component logic & renderingComponentName.stories.tsx - Storybook documentationComponentName.test.ts - Unit testsComponentName.types.ts - TypeScript definitionsComponentName.style.ts - Styling configurationindex.ts - Clean exports# Run unit tests
npm run test
# Run tests with storybook
npm run test-storybook
git checkout -b feature/amazing-componentFAQs
Qodly Design System - UI component library
We found that @ws-ui/ui-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.