
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
cwru-components
Advanced tools
To open Stencil where everything is built:
git checkout mastergit remote updategit pullnvm use 12.10 (OLD)nvm use 18npm install(OLD)npm install --legacy-peer-depsTo start Stencil: npm run start,
To start Storybook: npm run storybook
After changes are complete:
git add -Agit commit -m "MESSAGE"git checkout mastergit remote updategit pullTo publish
npm publishnpm login.nojekll and keep it blank. Commit it and push it upnpm run deploy-storybookInclude the script and stylesheet tags in the <head> of all your html files. The script tag MUST include type="module".
<link href="https://cdn.jsdelivr.net/npm/cwru-components/dist/cwru-components/cwru-components.min.css" rel="stylesheet" />
<script type="module" src="https://cdn.jsdelivr.net/npm/cwru-components/dist/cwru-components/cwru-components.esm.min.js"></script>
<script nomodule src="https://cdn.jsdelivr.net/npm/cwru-components/dist/cwru-components/cwru-components.js"></script>
The documentation is still under development. It lives on https://cwru.github.io/cwru-components/
When viewing a component, you can live update the attributes under the Controls tab at the bottom. When you are ready to use the component, click the HTML tab and the copy button at the bottom. This will keep all of the values you entered on the Controls tab.
This library is built using Stencil.js for generating the web components. We are using Storybook to create the docs.
The production version of the components live on NPM. To publish the latest version to NPM, first increase the version number in package.json and then run npm publish. Wait a few minutes and then check jsdeliver to see if the new version is available.
If an error occurs of "403 Forbidden - PUT https://registry.npmjs.org/cwru-components - Two-factor authentication or granular access token with bypass 2fa enabled is required to publish packages.", try npm adduser with username of cwru-components and jen's email address. Then do npm login and follow prompts. Run npm publish again.
npm recovery codes can be found here: https://drive.google.com/file/d/1QCr6uT9OzAy9EiLrlTCj8yEC1wbADhUf/view?usp=drive_link. CWRU-Components code is 131105
Switch to the gh-pages branch and add a new file. Name is .nojekll and keep it blank. Commit it and push it up.
To update the components to show up on Storybook, npm run deploy-storybook
Purge the CDN Server Cache by going to https://www.jsdelivr.com/tools/purge and purging https://cdn.jsdelivr.net/npm/cwru-components/dist/cwru-components/cwru-components.esm.min.js.
FAQs
CWRU Web Components
We found that cwru-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.