Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
component-stats
Advanced tools
[About this repo](#about-this-repo) | [Project board](#project-board) | [How to use this repo](#how-to-use-this-repo)
About this repo | Project board | How to use this repo
This tool tracks progress against the project to update Shopify/web
to remove duplicate components in favor of a single, extensible component and remove use of polaris-next
.
The tool generates usage statistics for a target directory.
Current status | Owner | Help |
---|---|---|
ongoing | @polaris-team | #core-deliver-global-components |
To run the script on an existing Shopify repository, make sure you have that repository cloned to your computer.
Make sure Git and Node.js are installed on your computer. You should be on Node version 14+. Run the following commands in your terminal to get started:
$ git clone https://github.com/Shopify/component-stats # git clone repository
$ cd component-stats # access the files
$ npm install # install dependencies
$ npm link # enable global access to dev-stats command
$ dev-stats --type [stat type] [target directory] # run locally
Note: If you get a permission denied error for
npm link
, run the command withsudo
.
If Shopify/web
is cloned in the same parent folder as component-stats
, the command to run the script should be as follows:
$ dev-stats --type scss ../web
Generate a single SCSS stats file for the target directory.
dev-stats --type scss ../web/packages/@Shopify/polaris-next
Generate historical SCSS stats files for the target directory.
dev-stats --type scss --historical ../web/packages/@Shopify/polaris-next
Note: The above commands will output the generated stats in the current working directory unless overridden by the
--output-dir
flag orOUTPUT_DIR
environment variable.
Run dev-stats --help
for detailed usage descriptions.
FAQs
[About this repo](#about-this-repo) | [Project board](#project-board) | [How to use this repo](#how-to-use-this-repo)
We found that component-stats demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.