
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Cegli [tzeyglee] stands for CEltra GUI Library. It's a collection of UI bricks we use at Celtra.
Please visit our Pattern Library Site for a live demo.
You can see everything on the live demo. Setup a local environment only for development purposes.
If you don't have bundler
installed, install it with
[sudo] gem install bundler
and then
bundle install
On OS X you'll probably have to use sudo
.
npm install
We're using gulp to compile CoffeScripts and less files and to arrange assets so they can be picked up by Jekyll.
npm start
Once gulp starts it will watch for any changes made to your files and recompile automatically if needed.
Open a second terminal window and startup Jekyll.
bundle exec jekyll s
Jekyll generates a static web page based on the source files. Use --no-watch
to not re-generate whenever the source files change.
By default the server is running on 0.0.0.0 at port 4000.
Start up your browser and head to http://localhost:4000
. If you're running jekyll on a VM open http://{ip_of_your_VM}:4000
.
First bump version in package.json
and then
npm publish # npm login if not logged in
You need to have correct registry URL Setup
npm config get registry
# if http://npm.celtra.com/ then:
npm config set registry http://registry.npmjs.org/
Sometimes you need to publish a package before it's ready to be released. We're using npm tags to do this.
First bump package version and assign a tag to it.
npm dist-tag add cegli@0.1.16 beta
Check if tag is assigned.
npm dist-tag ls
latest: 0.1.15
beta: 0.1.16
Once a version has a custom tag assigned it's ready to be prepublished. Publishing a package sets the latest
tag to the published version unless the --tag
option is used
npm publish --tag beta
Now you can use tag instead of version to install package.
"dependencies": {
"cegli" : "beta"
}
npm install cegli --tag beta
Don't forget to clear the tag once you're done.
npm dist-tag rm cegli beta
The gh-pages branch is specially configured to run on github pages and will not run on your local environment. Make sure you never directly commit to gh-pages. You should instead first update the master and then merge to gh-pages branch. This way we keep all changes in master and it's harder to break the live demo. Run gulp build
before committing to gh-pages branch.
_
prefix are ignored by jekyll and not copied to _site
.gulp clean
if you get an error similar to the one bellow when trying to switch the branch.Untracked working tree file 'build/fonts/avenirnextltpro-light-webfont.ttf' would be overwritten by merge.
FAQs
Cegli [tzeyglee] stands for CEltra GUI Library. It's a collection of UI bricks we use at Celtra.
The npm package cegli receives a total of 5 weekly downloads. As such, cegli popularity was classified as not popular.
We found that cegli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.