
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
auth0-styleguide-react-components
Advanced tools
Library of Auth0 React components. All the react-bootstrap components are re-exported inside this lib.
You can find the API, see examples, and play with live editing of every component on the React Components section of our styleguide.
If you are using npm you can do (react and react-bootstrap are peer dependencies):
npm i --save react@15 react-bootstrap@0.30 auth0-styleguide-react-components
And load the CSS from our CDN:
<!-- Core and Components CSS bundles are peer dependencies of react-components -->
<link rel="stylesheet" href="https://cdn.auth0.com/styleguide/core/1.0.0/core.min.css" />
<link rel="stylesheet" href="https://cdn.auth0.com/styleguide/components/1.0.0/components.min.css" />
<link rel="stylesheet" href="https://cdn.auth0.com/styleguide/react-components/1.0.0/react-components.css" />
The CSS bundles are also included on the packages installed via npm, but we encourage you to use it via our CDN so we all benefit from sharing the same url of the package to improve load time.
Here is a quick example to get you started:
import React from 'react';
import ReactDOM from 'react-dom';
import { Button } from 'auth0-styleguide-react-components';
const App = () => (
<div>
<Button>+1</Button>
</div>
);
ReactDOM.render(
<App />,
document.getElementById('app')
);
You can develop new components using React StoryBook.
The index.js
and examples.js
files will be used to generate the React Styleguide page of the component, which will contain all the documentation for it (title, description, examples and table with properties information).
To create a new component run npm start
and add your component inside the /src
folder with the following files:
Main component file, it should export the component.
We use react-docgen to extract information from this file to generate the documentation of our components. You should use the following structure:
import React, { PropTypes } from 'react';
/**
* Example component title: Example component description.
*/
const ExampleComponent = ({ prop1, prop2 }) => (
<div>Example component</div>
);
ExampleComponent.propTypes = {
/**
* prop1 description
*/
prop1: PropTypes.array.isRequired,
/**
* prop2 description
*/
prop2: PropTypes.number.isRequired
};
export default ExampleComponent;
This file will generate the following page in the React Styleguide website:
The comment on top of the component definition will match with the page title and description, while the comments on top of the propTypes definitions will match with the definitions of the properties table.
Export an array of objects representing the different examples of the component to showcase them in the Auth0 React Styleguide.
Each object of the array can have the following properties:
Property | Type | Description |
---|---|---|
component | React element | React element |
code | string | Code of the component (should match the code of the component property) |
center | boolean | Center the component in the middle of the playground |
title | string | Example title |
showTitle | boolean | Show the example title |
url | string | Url for the component page |
Example file:
import React from 'react';
import ExampleComponent from './';
const examples = [
{
component: (
<ExampleComponent />
),
code: `<ExampleComponent />`,
title: 'Example title',
center: true,
showTitle: true,
url: 'default'
}
];
export default examples;
Test your component using mocha, chai and enzyme.
Add stories for your React component. You can check React StoryBook - Writing Stories for more information.
Follow this conventions when you are developing components:
Run the command bin/version <patch|minor|major|version-no>
inside the root of this package. This will commit a new version for you.
Example
bin/version patch
All the logos and branding are copyright Auth0 and may not be used or reproduced without explicit permission from Auth0 Inc.
The icons are licensed from Budi Harto Tanrim. All other third-party components are subject to their own licenses.
FAQs
Library of Auth0 React components.
We found that auth0-styleguide-react-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.