
Product
Announcing Socket Fix 2.0
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
cra-shared-ui-scripts
Advanced tools
Scripts for CI pipelines to create versioned folders of your react application for deploying to a CDN
This package helps prep shared UI's for mindbody built with create react app continuous integration (CI) and continuous deployment (CD) pipelines. This package will help with the following:
You'll want to sandwich the react build command between two methods this package exposes. In your package.json or build script replace
"build": "react-scripts build"
with:
"build": "yarn prep-shared-ui && react-scripts build && yarn finalize-shared-ui"
Replace the CDN flag value with the URL and path of where your application is deployed to. If you are hosting the application in multiple environments, you'll need to use a dockerfile and replace the token in the build pipeline
You're app will be deployed and live on the CDN in folders matching your versions. All files located in the build
directory of where the command is run will be placed into a versioned folder and then your release pipeline can deploy that folder to the CDN.
Example of what your CDN file structure will look like:
https://your-cdn.com/path/to/app/1.0.0/{all files in the build folder}
https://your-cdn.com/path/to/app/1.1.0/{all files in the build folder}
https://your-cdn.com/path/to/app/2.0.0/{all files in the build folder}
Note that the finalize-shared-ui
will also copy over a CHANGELOG.md
file so your consumers can see what actually changed
You want to get started using this without worrying about setting it up when you're starting a new project? Use our create react app template and follow the steps in the readme to get started.
Proceed with caution: In the event the CDN is returning abnormal responses and you need to bypass the version check you can pass the flag prep-shared-ui --dangerouslyBypassVersionCheck
as part of the build. Before you complete your PR be sure the version doesn't exist on the CDN manually.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.