Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
abr-npm-5-test-2
Advanced tools
A library of reusable React components and an interface for easily building user interfaces based on Flux.
Carbon is a library of reusable React components and an interface for easily building user interfaces based on Flux.
Carbon Factory is supplementary to Carbon; providing tools to easily get your environment and project up and running to start building with React. As well as providing a command line interface to build projects, it manages tasks for compiling your assets and running test suites.
Check out our demo and documentation site for live examples and code snippets.
Carbon has an example page, which demonstrates most of the components with a Flux implementation. This can be used to quickly see a demonstration of the components and/or as an area to test while developing with the components.
To run the example, do the following steps:
git clone git@github.com:Sage/carbon.git
)cd carbon
npm install
gulp
See the guide on installing unreleased changes
N.B. Releases are created by Sage Carbon Team. We use semantic versioning
If releasing a minor version, create a branch from master
.
If releasing a patch version, create a branch from the tag you want to patch. This should be the latest tag apart from exceptional circumstances.
Bump the version in package.json
.
Ensure the CHANGELOG.md
is up to date.
Commit and push changes.
If releasing a minor version, open a PR to master
.
If releasing a patch version, open a PR to release
.
With the branch/version checked out locally on your machine, run npm run release-version
to publish to npm.
Once merged, publish a release in GitHub using the new version number as the tag. Make sure to target the correct branch (master
or release
).
If you have released from a branch other than master
, open a PR to merge that branch back into master
.
The following is a list of technologies Carbon utilises:
Carbon is licensed under the Apache-2.0 licence.
Copyright (c) 2017 Sage Group Plc. All rights reserved.
FAQs
A library of reusable React components and an interface for easily building user interfaces based on Flux.
We found that abr-npm-5-test-2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.