
Security News
The Changelog Podcast: Practical Steps to Stay Safe on npm
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.
demio-ui-kit
Advanced tools
Demio resources and components that are shared across Demio applications
yarn publishing
For a list of the components and a general overview of each, check out the Components & Resources README (src/README.md)
Testing & development should never be done via publishing to npm. There are two main ways to go about it.
Run Storybook and create a story file (see the stories folder) for the component, and then test and develop locally.
Before publishing, it's always helpful to test the changes in the repo you'll be adding the new demio-ui-kit version to. There are many ways to test this, but one of the best is yalc.
yarn storybook
Inside demio-ui-kit, run this:
yarn build
yalc publish
yarn build is only required if you have something like styles that need to be built via webpack
to show bundle analyzer report
yarn build --showBundleAnalyzer
Inside the external repo, run this:
yalc add demio-ui-kit
Boom! Now your local demio-ui-kit
To push demio-ui-kit changes to the external repo without needing to add the kit there again, run this in demio-ui-kit:
yalc push
Note that you'll need to do yarn build inside the demio-ui-kit again if you updated things that need to be rebuilt via webpack.
To remove the local demio-ui-kit from the external repo, run this in the repo:
yalc remove demio-ui-kit
Important: Do not push the yalc changes to the external repo.
yarn publish:docs
FAQs
Demio resources and components that are shared across Demio applications
We found that demio-ui-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.