
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
clever-components
Advanced tools
Check out documentation and live examples for Dewey, as well as our getting starting guide.
The following command will create a new component shell in src/MyNewComponent/
along with a starter test file and demo boilerplate:
./bin/new_component.sh MyNewComponent
You can also create additional sub-components in any existing directory by running:
./bin/new_sub_component.sh MyNewSubComponent ./src/MyNewComponent
You can then modify the component and demo code as needed.
Your new component can be viewed at http://localhost:5010/#/components/my-new-component
while the demo server is running.
After creating a new component, make sure to add it to the Component List in ComponentsView.jsx
. To do so:
ComponentsView.componentsToDisplay
using this template:
{
componentLink: "<COMPONENT LINK>",
componentImg: "<COMPONENT LINK>.png",
componentName: "<COMPONENT NAME>",
componentImgAlt: "A <COMPONENT NAME> component",
},
docs/assets/img
with the format <COMPONENT LINK>.png
We use SVGs as JSX components for Icon
s, following this process:
src/Icon/icons/<<NewIcon>>.jsx
src/Icon/icons/index.jsx
and src/Icon/Icon.jsx
Start up the demo server by running
make dev-server
For Clever engs, refer to this doc on how to test your changes in the context of other apps.
In short, if you want to test changes you've made to this repo in the context of another repo that uses clever-components
, run the components
repo's make build
command and use the freshly generated dist
directory in replacement of the clever-components/dist
directory on your other project's repository.
As part of any PR that changes the documentation, you should run, after your code has merged:
> make deploy-docs
If many people forget this step, it's possible that the above deploy-docs
target has issues. One of these is that the deploy.sh
's script's git subtree push
command fails. If that's the case, try forcing the git subtree push
in this manner:
git push origin `git subtree split --prefix docs master`:gh-pages --force
And then re-run the make deploy-docs
command.
FAQs
A library of helpful React components and less styles
The npm package clever-components receives a total of 227 weekly downloads. As such, clever-components popularity was classified as not popular.
We found that clever-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.