
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
@yext/cobalt-core
Advanced tools
Contains the Atoms, Molecules, Layout & other core components that make up the Cobalt UI library.
This repo contains the immutable Cobalt components, namely the Atoms & Molecules.
Versioning the commits correctly is extremely important. DO NOT modify the package.json or tags manually. Use yarn version -m [COMMIT MESSAGE]
and specify the next logical version number. This will commit all changes & update both package.json AND the git tag.
Use SEMVAR (semantic versioning)! There will be actual things using this repo as a dependency so SEMVAR matters!
For non-breaking changes (this means any repo can be upgraded without issues), increment the 3rd position. Ex. 0.0.1 -> 0.0.2 For breaking changes, increment the 2nd position. Ex. 0.1.0 -> 0.2.0 You should never need to increment the first position unless you are completely overhauling the cobalt system.
In your soy, simply call the components by their namespace and template name.
{call cobalt.molecules.Truncate data="all"}
// Params here
{/call}
In your scss, you can import the sass modules at the directory level or by the indivdiual components.
Some examples:
Import all @import '~@yext/cobalt-core'
Import all molecules @import '~@yext/cobalt-core/molecules'
Import a single molecule @import '~@yext/cobalt-core/molecules/Truncate'
import { Truncate } from "@yext/cobalt-core/molecules";
Truncate.init();
FAQs
Contains the Atoms, Molecules, Layout & other core components that make up the Cobalt UI library.
We found that @yext/cobalt-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 106 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.