
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
demio-ui-kit
Advanced tools
Demio resources and components that are shared across Demio applications
yarn publishing
For a list of the components and a general overview of each, check out the Components & Resources README (src/README.md)
Testing & development should never be done via publishing to npm. There are two main ways to go about it.
Run Storybook and create a story file (see the stories folder) for the component, and then test and develop locally.
Before publishing, it's always helpful to test the changes in the repo you'll be adding the new demio-ui-kit version to. There are many ways to test this, but one of the best is yalc.
yarn storybook
Inside demio-ui-kit, run this:
yarn build
yalc publish
yarn build is only required if you have something like styles that need to be built via webpack
to show bundle analyzer report
yarn build --showBundleAnalyzer
Inside the external repo, run this:
yalc add demio-ui-kit
Boom! Now your local demio-ui-kit
To push demio-ui-kit changes to the external repo without needing to add the kit there again, run this in demio-ui-kit:
yalc push
Note that you'll need to do yarn build inside the demio-ui-kit again if you updated things that need to be rebuilt via webpack.
To remove the local demio-ui-kit from the external repo, run this in the repo:
yalc remove demio-ui-kit
Important: Do not push the yalc changes to the external repo.
yarn publish:docs
FAQs
Demio resources and components that are shared across Demio applications
We found that demio-ui-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.